Skip to main content
  • Foundation
  • Executive network
  • CEO Circle
  • SHRM Business
  • Linkage Logo
  • Store
  • Sign In
  • Account
    • My Account
    • Logout
    • Global
    • India
    • MENA
SHRM
About
Book a Speaker
Join Today
Renew
Rejoin Now
Renew
  • Membership
  • Certification
    Certification

    Smiling asian student studying in library with laptop books doing online research for coursework, making notes for essay homework assignment, online education e-learning concept
    Get Certified!

    Be recognized as an HR leader with your SHRM-CP or SHRM-SCP credential.

    • How to Get Certified

      Demonstrate your ability to apply HR principles to real-life situations. No other HR certification compares.

      • How to Get Certified
      • Eligibility Criteria
      • Exam Details and Fees
      • SHRM-CP
      • SHRM-SCP
      • Which Certification is Best for Me
      • Certification FAQs
    • Prepare for the Exam

      Give yourself the best chance to pass your SHRM certification exam.

      • Exam Preparation
      • SHRM BASK
      • SHRM Learning System
      • Instructor-Led Learning
      • Self-Study
      • Study Aids & Add-ons
    • Recertification

      Recertify your SHRM Credentials before your end date!

      • Specialty Credentials
      • Qualifications
      Certification Portal
  • Topics & Tools
    Topics & Tools

    Stay up to date with workplace news and leverage our vast library of resources to streamline day-to-day HR tasks.

    The white house in washington, dc.
    Executive Order Impact Zone

    Do not abandon, but evaluate and evolve. It is about legal, equal opportunity for all.

    • News & Trends

      Follow breaking news and emerging workplace trends.

      Legal & Compliance

      Stay informed on workplace legal updates and their impacts.

      From the Workplace

      Explore diverse perspectives from your peers on today's workplaces.

      Flagships

      Get curated collections of podcasts, videos, articles, and more produced by SHRM.

    • HR Topics
      • AI in the Workplace
      • Civility at Work
      • Compensation & Benefits
      • Inclusion & Diversity
      • Talent Acquisition
      • Workplace Technology
      • Workplace Violence Prevention
      SEE ALL
      SHRM Research
    • Tools & Samples

      Access member resources and tools to streamline HR tasks.

      • Forms & Checklists
      • How-To Guides
      • Interactive Tools
      • Job Descriptions
      • Policies
      • Toolkits
      SEE ALL
      Ask an Advisor
  • Events & Education
    Events & Education

    SHRM25 in San Diego, June 29 - July 2, 2025
    Join us for SHRM25 in San Diego

    Register for the World’s Largest HR Conference being held on June 29 - July 2, 2025

    • Events
      • SHRM25
      • The AI+HI Project 2025
      • INCLUSION 2025
      • Talent 2026
      • Linkage Institute 2025
      SEE ALL
      Webinars
    • Educational Programs

      Designed and delivered by HR experts to empower you with the knowledge and tools you need to drive lasting change in the workplace.

      Specialty Credentials

      Demonstrate targeted competence and enhance credibility among peers and employers.

      Qualifications

      Gain a deeper understanding and develop critical skills.

    • Team Training & Development

      Customized training programs unique to your organization’s needs.

  • Business Solutions
  • Advocacy
    Advocacy

    Make your voice heard on public policy issues impacting the workplace.

    Advocacy
    SHRM's President & CEO testifies to Congress on "The State of American Education"
    • Policy Areas
      • Workforce Development
      • Workplace Inclusion
      • Workplace Flexibility & Leave
      • Workplace Governance
      • Workplace Health Care
      • Workplace Immigration
      State Affairs

      SHRM advances policy solutions in state legislatures nationwide.

      Global Policy

      SHRM is the go-to for global HR leaders and businesses on workplace matters.

    • Advocacy Team (A-Team)

      SHRM’s A-Team is a key member benefit, giving you the tools, insights, and opportunities to shape workplace policy and drive real impact.

      Take Action

      Urge lawmakers to support policies that create lasting, positive change.

      Advocacy & Legislative Resources

      Access SHRM’s curated policy materials and content.

    • SHRM-Led Coalitions
      • Generation Cares
      • The Section 127 Coalition
      • Learn More & Partner with SHRM Government Affairs
  • Community
    Community

    Woman raising hand in group
    Find a SHRM Chapter

    Easily find a local professional or student chapter in your area.

    • Chapters

      Find local connections from over 607 chapters and state councils and create your personalized HR network.

      SHRM Connect

      Post polls, get crowdsourced answers to your questions and network with other HR professionals online.

      SHRM Northern California

      Join SHRM members in the greater San Francisco Bay area for local events and networking.

    • Membership Councils

      Learn about SHRM's five regional councils and the Membership Advisory Council (MAC).

      • Membership Advisory Council
      • Regional Councils
    • Volunteers

      Learn about volunteer opportunities with SHRM.

      • Volunteer Leader Resource Center
Close
  • Membership
  • Certification
    back
    Certification
    Smiling asian student studying in library with laptop books doing online research for coursework, making notes for essay homework assignment, online education e-learning concept
    Get Certified!

    Be recognized as an HR leader with your SHRM-CP or SHRM-SCP credential.

    • How to Get Certified

      Demonstrate your ability to apply HR principles to real-life situations. No other HR certification compares.

      • How to Get Certified
      • Eligibility Criteria
      • Exam Details and Fees
      • SHRM-CP
      • SHRM-SCP
      • Which Certification is Best for Me
      • Certification FAQs
    • Prepare for the Exam

      Give yourself the best chance to pass your SHRM certification exam.

      • Exam Preparation
      • SHRM BASK
      • SHRM Learning System
      • Instructor-Led Learning
      • Self-Study
      • Study Aids & Add-ons
    • Recertification

      Recertify your SHRM Credentials before your end date!

      • Specialty Credentials
      • Qualifications
      Certification Portal
  • Topics & Tools
    back
    Topics & Tools

    Stay up to date with workplace news and leverage our vast library of resources to streamline day-to-day HR tasks.

    The white house in washington, dc.
    Executive Order Impact Zone

    Do not abandon, but evaluate and evolve. It is about legal, equal opportunity for all.

    • News & Trends

      Follow breaking news and emerging workplace trends.

      Legal & Compliance

      Stay informed on workplace legal updates and their impacts.

      From the Workplace

      Explore diverse perspectives from your peers on today's workplaces.

      Flagships

      Get curated collections of podcasts, videos, articles, and more produced by SHRM.

    • HR Topics
      • AI in the Workplace
      • Civility at Work
      • Compensation & Benefits
      • Inclusion & Diversity
      • Talent Acquisition
      • Workplace Technology
      • Workplace Violence Prevention
      SEE ALL
      SHRM Research
    • Tools & Samples

      Access member resources and tools to streamline HR tasks.

      • Forms & Checklists
      • How-To Guides
      • Interactive Tools
      • Job Descriptions
      • Policies
      • Toolkits
      SEE ALL
      Ask an Advisor
  • Events & Education
    back
    Events & Education
    SHRM25 in San Diego, June 29 - July 2, 2025
    Join us for SHRM25 in San Diego

    Register for the World’s Largest HR Conference being held on June 29 - July 2, 2025

    • Events
      • SHRM25
      • The AI+HI Project 2025
      • INCLUSION 2025
      • Talent 2026
      • Linkage Institute 2025
      SEE ALL
      Webinars
    • Educational Programs

      Designed and delivered by HR experts to empower you with the knowledge and tools you need to drive lasting change in the workplace.

      Specialty Credentials

      Demonstrate targeted competence and enhance credibility among peers and employers.

      Qualifications

      Gain a deeper understanding and develop critical skills.

    • Team Training & Development

      Customized training programs unique to your organization’s needs.

  • Business Solutions
  • Advocacy
    back
    Advocacy

    Make your voice heard on public policy issues impacting the workplace.

    Advocacy
    SHRM's President & CEO testifies to Congress on "The State of American Education"
    • Policy Areas
      • Workforce Development
      • Workplace Inclusion
      • Workplace Flexibility & Leave
      • Workplace Governance
      • Workplace Health Care
      • Workplace Immigration
      State Affairs

      SHRM advances policy solutions in state legislatures nationwide.

      Global Policy

      SHRM is the go-to for global HR leaders and businesses on workplace matters.

    • Advocacy Team (A-Team)

      SHRM’s A-Team is a key member benefit, giving you the tools, insights, and opportunities to shape workplace policy and drive real impact.

      Take Action

      Urge lawmakers to support policies that create lasting, positive change.

      Advocacy & Legislative Resources

      Access SHRM’s curated policy materials and content.

    • SHRM-Led Coalitions
      • Generation Cares
      • The Section 127 Coalition
      • Learn More & Partner with SHRM Government Affairs
  • Community
    back
    Community
    Woman raising hand in group
    Find a SHRM Chapter

    Easily find a local professional or student chapter in your area.

    • Chapters

      Find local connections from over 607 chapters and state councils and create your personalized HR network.

      SHRM Connect

      Post polls, get crowdsourced answers to your questions and network with other HR professionals online.

      SHRM Northern California

      Join SHRM members in the greater San Francisco Bay area for local events and networking.

    • Membership Councils

      Learn about SHRM's five regional councils and the Membership Advisory Council (MAC).

      • Membership Advisory Council
      • Regional Councils
    • Volunteers

      Learn about volunteer opportunities with SHRM.

      • Volunteer Leader Resource Center
Join Today
Renew
Rejoin Now
Renew
  • Store
    • Global
    • India
    • MENA
  • About
  • Book a Speaker
  • Foundation
  • Executive network
  • CEO Circle
  • SHRM Business
  • Linkage Logo
SHRM
Sign In
  • Account
    • My Account
    • Logout
Close

  1. Topics & Tools
  2. Workplace News & Trends
  3. HR Magazine
  4. Privacy Matters
Share
  • Linked In
  • Facebook
  • Twitter
  • Email

Lorem ipsum dolor sit amet, consectetur adipiscing elit. Vivamus convallis sem tellus, vitae egestas felis vestibule ut.


Error message details.

Copy button
Reuse Permissions

Request permission to republish or redistribute SHRM content and materials.


Learn More
Feature

Privacy Matters

Safeguarding employees' privacy requires an effective policy, sound practices and ongoing communication.

February 1, 2010 | Eric Krell



February CoverBeverly Widger, SPHR, senior vice president for human resources at Claremont Savings Bank in Claremont, N.H., introduces new hires to the realm of corporate privacy during orientation. "We are constantly aware of our customers’ privacy as well as our own employees’ privacy," says Widger, a member of the Society for Human Resource Management’s (SHRM) Employee Relations Special Expertise Panel.

Widger and other HR managers at companies with mature privacy programs emphasize that creating privacy policies represents only one of several components necessary for effective privacy management. They say managing the policies requires board-level action, an ongoing collaborative management effort, employee education and, just as important, making the policies meaningful to all employees.

That explains why HR professionals play a crucial role in managing privacy policies and why Widger presents real-world scenarios related to privacy during orientation and in workforce communication.

Says Bernard Ruesgen, SPHR, logistics HR group manager for Sports Authority in Englewood, Colo.: "Whether you’re talking about Internet security, e-mail security, personnel files, health care or other privacy issues that touch almost every element of the business, you have to make it meaningful." In short, HR professionals need to place these policies in a context that employees can relate to.

This communication effort never ends, privacy experts say, because of the expanding use of technology and communication in personal and business lives. The risks of mismanaging employees’ privacy can be severe: lost revenue, lost productivity, legal or regulatory actions, declines in brand value and shareholder value, and recruiting and retention problems.

HR professionals need to understand privacy issues to manage and mitigate the risks associated with the data they work with, says J. Trevor Hughes, executive director of the International Association of Privacy Professionals (IAPP) in York, Maine.

An Emerging Patchwork

Corporate privacy generally covers customer and employee privacy, with subcategories including the privacy of job applicants and how vendors such as benefits providers protect the privacy of client companies’ employees. The emergence of the chief privacy officer position reflects the growing importance of corporate privacy management. (See "New Face in the C-Suite" in the January 2010 issue of HR Magazine.)

Hughes says HR professionals should sharpen their skills in spotting privacy issues, an area of expertise covered in the Certified Information Privacy Professional designation that the IAPP offers members. Yet, spotting such issues can be tricky, given the fluctuations in privacy regulations globally.

The European Union requires companies doing business in its member countries to adhere to employee privacy principles. The U.S. government has not passed a sweeping privacy law since the Electronic Communications Privacy Act of 1986, which regulates how employers monitor employee telephone calls. 

Since then, a patchwork of requirements has slowly developed, notes Philip Gordon, a shareholder in Littler Mendelson’s Denver office and chair of the employment and labor law firm’s data privacy and protection practice.

The Americans with Disabilities Act of 1990 contains confidentiality requirements, and the Health Insurance Portability and Accountability Act of 1996 includes rules protecting the security and privacy of employee health data. Most recently, the Genetic Information Nondiscrimination Act of 2008—which prevents employers from using genetic information, including family medical histories, in staffing decisions—and several state laws governing personal data have been enacted. In addition, the threat of identity theft casts privacy protection in a new light; many state laws require notice when there has been a privacy breach.

As such privacy protection increases, corporate policies concerning privacy require improvement, insists Lewis Maltby, president and founder of the National Workrights Institute in Princeton, N.J., and author of Can They Do That? Retaking Our Fundamental Rights in the Workplace (Portfolio, 2010).

At many companies, the privacy policy "is what employees see on their screens when they turn their computers on," Maltby explains. "That so-called notice is really a reservation of rights. It doesn’t really indicate anything about the company’s actual privacy practice."

As a result, employees’ expectations and employers’ actions concerning privacy frequently are misaligned, creating problems. Maltby notes that 25 percent of employers have fired employees because of "inappropriate" e-mails, yet many organizations fail to define what "inappropriate" means.

"Some privacy advocates suggest that employers are Big Brother and want to spy on employees," Maltby says. "That’s not the case. This is a sin of omission. … Employees have virtually no privacy in e-mail communications, text messages or web sites that they visit at work. And when they find out, it damages morale and productivity in ways that don’t usually get noticed. On occasion, it affects recruitment and retention."

Creating a Policy

The first step in aligning privacy expectations involves creating a corporate privacy policy.

Many companies create two types of policies, says Gordon. An employee-facing policy provides relatively high-level principles governing the organization’s collection, use, disclosure, safeguarding and disposal of employee data. An operational policy or manual is directed internally for people who access and use employee data to perform legitimate job functions.

The principles typically describe what employee data the company collects and how the data are collected; used; shared, if applicable; accessed; stored; and, when necessary, disposed of. The operational policy usually consists of numerous policies tailored to the privacy issues of different departments and groups. Companies such as Claremont Savings Bank, Sports Authority and Eastman Kodak Co. in Rochester, N.Y., follow the approach Gordon describes.

For example, when job candidates visit Kodak’s job-posting site, they see a privacy notice geared toward them; this notice differs from both the policy employees see and the policies directed at customers.

Widger and Ruesgen emphasize that developing a corporate privacy policy is a board-level effort requiring regular and deep collaboration among HR, legal, information technology (IT) and privacy professionals. "Create a cross-functional team," Gordon says. "No single person has all of the knowledge or skills necessary."

Each year, Claremont Savings Bank’s compliance officer and at least one other senior officer review the bank’s privacy policy. After that, the policy goes to the board for approval. Then, Widger and her team communicate the policy—focusing on updates and areas requiring attention—to managers and employees, who are required to sign off annually. Training, online or in person, accompanies the effort.

A compliance officer develops the policies and makes updates, and an internal auditor ensures that the policies are being adhered to, says Widger, who recently worked with her compliance officer, the bank’s top IT executive and other senior-level officers to expand the policy to address social media issues.

HR’s Role

HR professionals help craft and communicate the policies while operating as perhaps the organization’s most important protectors of employee privacy.

"HR professionals may be touching more-sensitive, and potentially more-damaging, personal data than anyone else," says Hughes. "As our concept of sexual harassment evolved, HR professionals became educated and more sophisticated in their management of those issues. As our concept of privacy in the marketplace evolves, HR professionals are going to have to step up once again and get themselves educated on, and aware of, these issues."

This awareness extends beyond having employees sign receipts for handbooks that contain the privacy policy and even beyond the company’s walls. "Incorporate the elements of the policy into your daily discussions," Ruesgen says. "If you have a managers’ meeting that covers leave-of-absence policies, a natural segue into privacy exists, and you have to leverage that conversation." In the situation Ruesgen describes, for example, explain to managers that if an employee takes leave for a personal medical or financial reason, that information must remain confidential.

One reason Brian O’Connor, Kodak’s chief security and privacy officer, works closely with HR colleagues: "HR can help by making sure that what you are drafting can be understood by the average employee," he says.

And don’t just look at your own organization, Widger notes. "Look at your payroll provider, your benefits provider, your 401(k) provider—any vendor that you use—to understand what they have in place to protect your employees’ information."

Claremont Savings Bank requires relevant vendors to complete Statement of Auditing Standards (SAS) 70 audits and to sign a privacy policy agreement stating that they will keep employee information confidential and protected.

SAS 70 audits were developed by the American Institute of Certified Public Accountants in the late 1980s and finished in the early 1990s. Their use has increased since enactment of the Sarbanes-Oxley Act of 2002. The audits come in two types, depending on their rigor, and are designed to help vendors show client companies that internal privacy controls are up to snuff.

All of this can sound overwhelming to HR professionals in organizations without formal privacy functions or pre-Internet-era policies in hard-copy employee handbooks. Fortunately, there are several steps that can kick-start improvement efforts. (See the sidebar "Get Started.") The most important step for HR professionals involves understanding and accepting their key roles in shaping and disseminating privacy policies.

"The more personal stories that you can give to help drive home the importance of the policy, the better," Widger advises.

Consider a Model Policy

In his book, Can They Do That? Retaking Our Fundamental Rights in the Workplace (Portfolio, 2010), National Workrights Institute founder and President Lewis Maltby presents a model corporate privacy policy. The policy explains how companies will address seven areas of employee privacy: personal information, medical information, employee monitoring, off-duty conduct, substance abuse, notice of monitoring practices and enforcement. The “monitoring” section specifies how employers may monitor computer use, telephone conversations and employee location—with, for example, global positioning systems—and how they may conduct video surveillance.

Get Started

Below are some tips for improving privacy management:
Begin with principles. Mature corporate privacy programs typically contain detailed operational policies as well as high-level principles that briefly and clearly state how employee information will be collected and safeguarded. Communicating those principles can better align the privacy management expectations of employees and managers.

Create a policy governing information technologists’ review of e-mail. National Workrights Institute founder and President Lewis Maltby says employees understand that there are legitimate business reasons for an employer to read their e-mail. “They are not upset about that,” he says, “unless they find out that the IT employees are reading their personal e-mails for their personal amusement.” He says what is more upsetting to employees is finding out—as they do one time in four—that there isn’t even a rule directing IT employees not to read personal e-mail. Maltby says this element of the privacy policy should include an enforcement mechanism.

Define “inappropriate.” This step is crucial, according to Maltby, and requires addressing difficult questions. “Figure out what you’re going to permit in a systematic manner and then communicate that upfront to your employees,” he insists.

Consider Internet time curbs. The biggest problem posed by employee Internet surfing is not pornography or other offensive site visits, according to Maltby. “The biggest problem is the lost time.” Web-access software that only blocks offensive sites does not address this problem. Maltby says other software can support specific privacy policies, including applications that eliminate access to Facebook, Amazon, ESPN and all other sites not related to work, after employees have used an allotted personal surfing time.

Lose the legalese. Human resource professionals should play a key role in translating legal privacy issues into practice. It’s “easy to have your general counsel stamp out something that reads like a lawyer wrote it,” says Bernard Ruesgen, SPHR, logistics HR group manager for retail chain Sports Authority. HR professionals have “to put a human touch on the whole process.”

Web Extras

SHRM article: New Face in the C-Suite (HR Magazine)

SHRM article: U.S. Supreme Court to Hear Employee Text Message Privacy Case (SHRM Online Legal Issues)

SHRM video: Jason Morris, president and chief operation officer of employeescreenIQ, discusses safekeeping employee and applicant data

SHRM sample policy: Employee Records Confidentiality Philosophy

SHRM sample policy: Personnel Information Disclosure to External Parties

SHRM sample policy: Cameras in the Workplace

SHRM sample policy: Recording Devices in the Workplace

Web site: The International Association of Privacy Professionals

Sample policy: Corporate Privacy Policy (Can They Do That? Retaking Our Fundamental Rights in the Workplace​​ by Lewis Maltby by arrangement with Portfolio, a member of Penguin Group (USA) Inc., Copyright (c) Lewis Maltby, 2010.)

Employee Relations
Policies and Practices

Artificial Intelligence in the Workplace

​An organization run by AI is not a futuristic concept. Such technology is already a part of many workplaces and will continue to shape the labor market and HR. Here's how employers and employees can successfully manage generative AI and other AI-powered systems.



Related Content

Kelly Dobbs Bunting speaks onstage at SHRM24
(opens in a new tab)
News
Why AI+HI Is Essential to Compliance

HR must always include human intelligence and oversight of AI in decision-making in hiring and firing, a legal expert said at SHRM24. She added that HR can ensure compliance by meeting the strictest AI standards, which will be in Colorado’s upcoming AI law.

(opens in a new tab)
News
A 4-Day Workweek? AI-Fueled Efficiencies Could Make It Happen

The proliferation of artificial intelligence in the workplace, and the ensuing expected increase in productivity and efficiency, could help usher in the four-day workweek, some experts predict.

(opens in a new tab)
News
How One Company Uses Digital Tools to Boost Employee Well-Being

Learn how Marsh McLennan successfully boosts staff well-being with digital tools, improving productivity and work satisfaction for more than 20,000 employees.

HR Daily Newsletter

Stay up to date with the latest HR news, trends, and expert advice each business day.

Success title

Success caption

Manage Subscriptions
  • About SHRM
  • Careers at SHRM
  • Press Room
  • Contact SHRM
  • Book a SHRM Executive Speaker
  • Advertise with Us
  • Partner with Us
  • Copyright & Permissions
  • Post a Job
  • Find an HR Job
Follow Us
  • LinkedIn
  • Facebook
  • Twitter
  • Instagram
  • YouTube
  • SHRM Newsletters
  • Ask An Advisor

© 2025 SHRM. All Rights Reserved

SHRM provides content as a service to its readers and members. It does not offer legal advice, and cannot guarantee the accuracy or suitability of its content for a particular purpose. Disclaimer


  1. Privacy Policy

  2. Terms of Use

  3. Accessibility

Join SHRM for Exclusive Access to Member Content

SHRM Members enjoy unlimited access to articles and exclusive member resources.

Already a member?
Free Article
Limit Reached

Get unlimited access to articles and member-exclusive resources.

You've reached the limit of 1 free article this month. Join to access unlimited articles and member-only resources.

Already a member?
Free Article
Exclusive Executive-Level Content

This content is for the SHRM Executive Network and Executive Content Subscription members only.

You've reached the limit of 1 free article this month. Join the Executive Network and enjoy unlimited content.

Already a member?
Free Article
Exclusive Executive-Level Content

This content is for the SHRM Executive Network and Executive Content Subscription members only.

You've reached the limit of 1 free article this month. Join and enjoy unlimited access to SHRM Executive Network Content.

Already a member?
Unlock Your Career with SHRM Membership

Please enjoy this free resource! Join SHRM for unlimited access to exclusive articles and tools.

Already a member?

Your membership is almost expired! Renew today for unlimited access to member content.

Renew now

Your membership has expired. Renew today for unlimited access to member content.

Renew Now

Your Executive Network membership is nearing its expiration. Renew now to maintain access.

Renew Now

Your membership has expired. Renew your Executive Network benefits today.

Renew Now