The Pennsylvania Supreme Court recently ruled that employers have a legal duty to protect employees’ electronically stored personal information and that failing to do so could leave them liable for damages, according to a blog post from Stradley Ronon. The report states that while the decision sends a clear message, the state recognizes the duty of the employer to safeguard employees, adding that “the extent of this duty remains unclear.” The case, Dittman v. UPMC, involved allegations that the employer exposed sensitive employee data when it failed to adopt appropriate safeguards and reasonable protection. Plaintiffs alleged the  UPMC failed to encrypt data, establish firewalls, or implement an adequate authentication protocol.
Full Story