The use of social networking websites, contact sharing, and data collection on the internet, unscrupulous companies should be aware of the potential liabilities that come with using big data. LinkedIn, the well-known professional social networking site, is facing a federal class action lawsuit for violating the Fair Credit Reporting Act (FCRA). According to the complaint, the company sold information about user’s employment history to potential employers without consent. This kind of information has the potential to be extremely damaging to employees, resulting in adverse employment action, including failure to hire, demotion, or termination of employment.
Under the FCRA, employers must follow strict guidelines about how they use employee credit, employment and insurance history. These protections are in place to ensure that employees are not wrongfully targeted or discriminated against during the application process. Employers must follow strict requirements related to consent to access data. They must also supply notices to applicants before they take any adverse action against an employee, including failure to hire, demotion, failure to promote, or termination of employment. Employees who lose opportunities as a result of their employment, credit, or other history must be given notice and the opportunity to contest the information provided by a reporting agency.
According to the lawsuit filed against LinkedIn, the company violated the FCRA by selling “profiles” on millions of users without verifying that the information would be used for legal purposes. There is some speculation that the case will turn on whether the company qualifies as a Consumer Reporting Agency and is held to the standards of the FCRA. Regardless, employees should be aware of the information that could be used against them, whether online and available to the public, or provided by third-party reporting agencies. Employers who use information illegally, including medical documents, credit card history, or credit reports, criminal records, as well as other personal information can be held liable.