Clorox cleans out BlackBerries in favor of iPhones, Android devices – Computerworld

When Ralph Loura took over as CIO of Clorox a year ago, the company was standardized on clunky Windows 2000 desktop computers and Blackberry mobile phones.

“Employee satisfaction with the IT team was not great,” he said during a keynote speech yesterday at the SNW conference here.

“If you believe demographic studies, the workforce in their 20s and 30s isn’t going to accept black corporate PCs with black corporate mobile phones and not be allowed to run Facebook or Angry Bird apps,” he said.

Loura was among many CIOs and IT managers at SNW who said they’re facing the same issue — employees want to use mobile technology at work, leaving IT with the job of ensuring that the devices and the data on them remain secure.

For Loura, that meant revamping the company’s IT infrastructure while leveraging public and private clouds whenever possible.

The effort to enable a more mobile workforce becomes more a challenge at a company — like Clorox — whose 8,300 person workforce is split evenly between “information” workers and plant workers.

Loura so far has replaced 6,000 desktop and tower computers with lightweight HP laptops, and got rid of company-issued Blackberries while letting workers choose between an iPhone or Android or Window Phone 7-powered smartphone. The company has issued 2,000 smartphones, 92% of which are iPhones. About 6% of the smartphones chosen were Android-based while 2% were Windows Phone 7 devices.

via Clorox cleans out BlackBerries in favor of iPhones, Android devices – Computerworld.

The Latest Headache for Companies: That Every Employee Has a Whistle – Law Blog – WSJ

Members of corporate boards and audit committees, in-house lawyers and ethics officers are all still nervously awaiting the impact of one key component of the Dodd-Frank law that passed in July.

The provision concerns one key, frightening word: “whistleblower.”

Dodd-Frank provides significant financial incentives for employees to tell regulators about securities fraud and other wrongdoing. Not only are corporate insiders worried about unexpected liability, but the provision also threatens to increase costs for companies and undermine internal fraud detection efforts launched under the 2002 Sarbanes-Oxley law. Click here for the WSJ story on the topic, written by me and Joann Lublin.

The “bounty” provision “runs in direct opposition” to internal fraud-detection efforts put in place or beefed up under the Sarbanes-Oxley law that passed after a wave of accounting scandals, says Richard Crist, chief ethics and compliance officer at Allstate Insurance Co. “It undermines a lot of work that a lot of us have done.”

In the past, companies typically attempted to address certain fraud allegations internally by setting up confidential hotlines through which employees report alleged ethical misdeeds and illegal behavior. But the Dodd-Frank provision offers a financial incentive to ignore a company’s own process and run straight to the government, management lawyers say.

Corporate whistleblowers who take original evidence of financial fraud under the Dodd-Frank law directly to the Securities & Exchange Commission and Commodity Futures Trading Commission stand to get between 10% and 30% of a penalty that is over $1 million.

via The Latest Headache for Companies: That Every Employee Has a Whistle – Law Blog – WSJ.

The Latest Headache for Companies: That Every Employee Has a Whistle – Law Blog – WSJ

Members of corporate boards and audit committees, in-house lawyers and ethics officers are all still nervously awaiting the impact of one key component of the Dodd-Frank law that passed in July.

The provision concerns one key, frightening word: “whistleblower.”

Dodd-Frank provides significant financial incentives for employees to tell regulators about securities fraud and other wrongdoing. Not only are corporate insiders worried about unexpected liability, but the provision also threatens to increase costs for companies and undermine internal fraud detection efforts launched under the 2002 Sarbanes-Oxley law. Click here for the WSJ story on the topic, written by me and Joann Lublin.

The “bounty” provision “runs in direct opposition” to internal fraud-detection efforts put in place or beefed up under the Sarbanes-Oxley law that passed after a wave of accounting scandals, says Richard Crist, chief ethics and compliance officer at Allstate Insurance Co. “It undermines a lot of work that a lot of us have done.”

In the past, companies typically attempted to address certain fraud allegations internally by setting up confidential hotlines through which employees report alleged ethical misdeeds and illegal behavior. But the Dodd-Frank provision offers a financial incentive to ignore a company’s own process and run straight to the government, management lawyers say.

Corporate whistleblowers who take original evidence of financial fraud under the Dodd-Frank law directly to the Securities & Exchange Commission and Commodity Futures Trading Commission stand to get between 10% and 30% of a penalty that is over $1 million.

via The Latest Headache for Companies: That Every Employee Has a Whistle – Law Blog – WSJ.

RT @isightsoftware: An Information Security Nightmare: The Disgruntled Employee: http://bit.ly/bMKzswhttp://bit.ly/bMKzsw

RT @isightsoftware: An Information Security Nightmare: The Disgruntled Employee: http://bit.ly/bMKzswhttp://bit.ly/bMKzsw

German Government Moves on Draft Law Regarding Employee Data Protection : Privacy & Information Security Law Blog

On August 25, 2010, the German government approved a draft law concerning special rules for employee data protection, originally proposed by the Federal Ministry of the Interior.  A background paper on the draft law was published on August 25, 2010.  The draft law would amend the German Federal Data Protection Act (the Bundesdatenschutzgesetz or “BDSG”) by adding provisions that specifically address data protection in the employment context.  Currently, employee data protection is regulated by (1) general provisions in the BDSG, (2) the new Section 32 of the BDSG introduced by the most recent reform in September 2009, (3) the Works Constitution Act, (4) guidance from state data protection authorities, and (5) comprehensive case law from federal and local labor courts.

The draft law covers nine key subject areas:

via German Government Moves on Draft Law Regarding Employee Data Protection : Privacy & Information Security Law Blog.

Reviewing employees’ email | Lexology

Quirky Question # 144:

I’m confused. I thought we could review our employee’s email communications when sent out on our company’s equipment. Our electronic communications policy states clearly that we reserve the right to do so.

I also thought we could review even privileged communications between our soon-to-be ex-employee and his attorney, if these communications were sent on our email system. I’m now being advised that we cannot do so. Can you offer any guidance?

My Analysis:

Your question illustrates the ongoing legal evolution in areas where advancing technology intersects employment law or affects other facets of legal analyses – here, the attorney-client privilege. Like technology itself, the law is developing and changing quickly in areas affected by technological advancements.

With respect to the issue of whether a company may review email communications of its employees, including even email communications between your employee and his/her outside counsel, I have written on this subject twice before. Happily, I am pleased to report that the advice I gave two years ago has been validated and reinforced by a recent decision from the Supreme Court of New Jersey.

The “confusion” you may be experiencing regarding this issue likely reflects the fact that this continues to be an area of the law where courts are providing mixed messages to litigants and their lawyers alike. Unsurprisingly, not all judicial decisions have adopted a uniform approach to the question of whether email communications to counsel, when sent on a company’s communications systems or computers, are protected by the attorney-client privilege.

One case that has received considerable recent attention and commentary is Stengart v. Loving Care Agency, Inc., et al., decided by the Supreme Court of New Jersey on March 30, 2010. Stengart is a thoughtful opinion and highlights many of the issues that you should consider in evaluating your unique fact pattern.

via Lexology – Reviewing employees’ email.

New French Case Removes Automatic Privacy Shield From Employee E-Mails, Making Them More Amenable to US Discovery : H&H Chronicle of Data Protection

A new decision released on 8 January 2010 from the French high labor court (the Cour de Cassation Chambre Sociale) may provide some grounds for arguing that a party in France can review a French employee’s e-mails and electronically stored information to determine whether the data is relevant to a U.S. litigation, without the employee’s knowledge or presence.  This is a significant development in the perennial tension between EU privacy law and U.S. discovery principles.

European Union policies protecting personal privacy almost always conflict with United States policies that grant litigants full and complete discovery of documents and electronically stored information in U.S. court actions.  The conflict is particularly acute in France, where a French corporation participating in U.S. litigation may easily run afoul of the French Blocking Statute (Law No. 68-678, as amended), data processing laws (e.g. Law No. 78-17, as amended), and the EU Directive 95/46 on Personal Data (“Directive”), among others.

Indeed, after years of goading by U.S. courts, French authorities even prosecuted someone, a French lawyer, under the blocking statute.  His crime was attempting to comply with a U.S. court order compelling production of documents.  See In re Christopher X, Cour de Cassation, Chambre Criminelle, Paris, December 12, 2007, No. 07-83228 (French Supreme Court upholding conviction and €10,000 fine against French lawyer attempting to facilitate collection of evidence for use as ordered in a U.S. judicial proceeding).  Examples of U/S. goading include In re Vivendi Universal S.A. Secs. Litig., No. 02 Civ. 5571, 2006 WL 3378115 at *3 (S.D.N.Y. 2006) (French blocking statute did not subject parties to a “realistic risk of prosecution”) and Minpeco S.A. v. Conticommodity Servs., Inc., 116 F.R.D. 517 at 528 (S.D.N.Y. 1987) (“this is not a situation in which the party resisting discovery has relied on a sham law such as a blocking statute to refuse disclosure”).

via New French Case Removes Automatic Privacy Shield From Employee E-Mails, Making Them More Amenable to US Discovery : H&H Chronicle of Data Protection.

Relationship databases the new target for e-discovery :: PublicTechnology.net :: e-Government & public sector IT news + job vacancies:

IT professionals should be aware of a rather nasty new trend. Customer, citizen and employee relationship databases were the most common target for e-discovery-based information-gathering for litigation purposes last year.

According to IDC, among 115 litigation support and legal technology operations professionals found that the number of respondents experiencing more than 100 law suits over the last year rose to 46% from 27% in 2008.

A huge 70% of those questioned were involved in international litigation, with the most popular disputes centring on employee termination and intellectual property, which tied for first place. Investigations under the US Foreign Corrupt Practices Act and product liability claims were joint third, while insurance claims came in fifth.

The top three regions where enterprises needed to conduct investigations as well as preserve and collect data were European Union member states, followed by Canada and North Asia, which includes Japan, South Korea and China.

via Relationship databases the new target for e-discovery :: PublicTechnology.net :: e-Government & public sector IT news + job vacancies:.

Social Networking: A Workplace Policy

The first part of this article addressed issues surrounding the effect of the internet on hiring and firing in the 21st Century.This article discusses the laws that impact social networking in the workplace and provides guidance on developing a social networking and blogging policy.

OFF-DUTY CONDUCT STATUTES AND PRIVACY LAWS

Many states have enacted off-duty conduct statutes, which prohibit an employer from disciplining an employee for engaging in lawful conduct while away from the employer's premises. These states include, most notably, California, Colorado and New York. However, these statutes also provide exceptions that allow employers to limit otherwise lawful, off-duty conduct where it creates a material conflict of interest for the employer or is reasonably related to the employee's job. For example, the New York statute allows an employer to discharge an employee for off-duty conduct that creates a material conflict of interest related to trade secrets, proprietary information, or some other business interest.

In addition, courts interpreting these statutes have granted employers broad discretion in disciplining employees where the employer can show that the off-duty conduct has damaged the business, hurt the employer's interests, or is otherwise inconsistent with the employer's business needs. It should also be noted that a handful of jurisdictions, namely, Connecticut, the District of Columbia, Louisiana, New York, South Carolina, and Washington, protect employees from being discharged or otherwise disciplined for engaging in political activity or speech.

An employee who is discharged based on online conduct may also have a colorable invasion of privacy claim. To prevail on such a claim, the employee must prove that the information obtained by his or her employer was, in fact, private. Where information posted on a social networking site or blog can be viewed by the world at large, it will not be considered private. However, many of these sites allow users to grant access to their page by invitation only. Thus, access is restricted to a small group of individuals and may be considered “private” for purposes of a common law privacy claim.

via Law.com – Social Networking: A Workplace Policy.