Part 5 of John's CIPP/US Privacy Materials
Workplace Privacy Laws, BoK IV
by John Bandler
This is Part 5 of my U.S. Privacy and CIPP/US and privacy learning materials, aligning with CIPP/US BoK Domain IV.
+ This page is greatly updated and mostly comprehensive after a recent revamp in August 2026. +
1. To navigate John's CIPP/US pages
2. Topics covered
Here we cover cover issues relating to privacy in the workplace. What are the privacy rights of job applicants, employees, and former employees? There are laws to protect the privacy rights of job applicants and employees.
Some of these laws we might not even think of as privacy laws. For example, anti-discrimination laws might not seem like a privacy law at first glance. But if a law prohibits an employer from making hiring or other employee decisions based on certain protected categories, such as race, religion, sexual orientation, and so forth, then that law also protects the privacy of the individual against collection of information relating to these characteristics.
The domain has an odd organization and is basically set up regarding:
- Privacy in the workplace introduced
- Privacy before, during, and after employment.
3. Don't forget the overall references for CIPP/US and my courses
- See my Part 1 webpage for the overall references and additional reading (including IAPP resources)
- My online courses provide priority coverage of important areas, so if you are in my online course, listen to those first.
- I have created two online courses to help people learn about privacy and prepare for this certification exam.
- My Udemy CIPP/US course was originally geared for lawyers and law students, but many non-lawyers have taken it too. It is on the Udemy learning platform, and you can purchase it for under $20, including with my coupon code.
- Another course is geared for information security professionals on the Infosec Skills subscription based learning platform (Infosec Skills was bought by online education behemoth Cengage).
- If you are taking one of my online courses and want to dig deeper into the materials, I provide resources and references here. Prioritize your time, start by learning the basics before digging into the weeds.
- If you are not taking one of my online courses, that's OK too, I hope they help you, and please consider this.
4. Part 5 specific references
- See my Part 1 course for the overall references and additional reading (including IAPP resources, the coursebook, etc.)
- My courses provide priority coverage of important areas. If you want to dig deeper (or are not taking one of my courses) see these resources.
Part 5 prioritization: As always, start with the basics. This part is not heavily tested but we all work in a workplace, or are working towards that goal, so this is an important domain for us personally. Privacy in the workplace will also include a lot of the prior domains, and the next domain.
Key Cyberlaw book parts and chapters relating to this domain include:
- None really.
4.1 List of some workplace privacy laws
- S. Constitution and Amendments (for government employers only)
- HIPAA (Health Insurance Portability and Accountability Act)
- COBRA to continue health coverage after employment (Consolidated Omnibus Budget Reconciliation Act of 1985)
- ERISA for pensions (Employee Retirement Income Security Act of 1974)
- FMLA (Family and Medical Leave Act)
- FCRA (Fair Credit Reporting Act)
- FLSA (Fair Labor Standards Act)
- OSHA (Occupational Safety and Health Act)
- Whistleblower Protection Act
- Securities Exchange Act
- NLRA (National Labor Relations Act)
- ICRA (Immigration Reform and Control Act of 1986)
- Employee Polygraph Protection Act of 1988 (EPPA)
- ECPA (Electronic Communications Privacy Act)
- SCA (Stored Communications Act)
- Wiretap Act
- Antidiscrimination laws
- Civil Rights Act of 1964
- Americans with Disabilities Act (ADA)
- Genetic Information Nondiscrimination Act (GINA)
4.2 Workplace federal regulators
- Department of Labor (DOL), https://www.dol.gov/
- Equal Employment Opportunity Commission (EEOC), https://www.eeoc.gov/
- National Labor Relations Board (NLRB), https://www.nlrb.gov/
- Occupational Safety and Health Administration (OSHA), https://www.osha.gov/
- Securities and Exchange Commission (SEC), https://www.sec.gov/
- Federal Trade Commission (FTC), https://www.ftc.gov/
- Consumer Financial Protection Bureau (CFPB), https://www.consumerfinance.gov/
4.3 Anti-discrimination laws in context
- Pre 1865
- 1865: 13th Amendment to US Constitution
- 1868: 14th Amendment to US Constitution
- 1870: 15th Amendment to US Constitution
- Ku Klux Klan Act of 1871
- 1920: 19th Amendment to US Constitution
- 1964: Civil Rights Act
4.4 Civil Rights Act statutes
- 42 U.S. Code Chapter 21 – Civil Rights (42 USC § 1981-2000h-6, https://www.law.cornell.edu/uscode/text/42/chapter-21
- 42 U.S. Code Chapter 21 Subchapter VI - Equal Employment Opportunities (42 USC § 2000e), https://www.law.cornell.edu/uscode/text/42/chapter-21/subchapter-VI
- 42 U.S. Code § 2000d - Prohibition against exclusion from participation in, denial of benefits of, and discrimination under federally assisted programs on ground of race, color, or national origin, https://www.law.cornell.edu/uscode/text/42/2000d
4.5 Other
Americans with Disabilities Act (ADA) of 1990
- S. Gov’t ADA site, https://www.ada.gov/
- Law, Regulations & Standards, https://www.ada.gov/law-and-regs/
2008 Genetic Information Nondiscrimination Act (GINA)
- EEOC, Genetic Information Nondiscrimination Act of 2008, https://www.eeoc.gov/statutes/genetic-information-nondiscrimination-act-2008
- DoL, The Genetic Information Nondiscrimination Act of 2008: "GINA", https://www.dol.gov/agencies/oasam/centers-offices/civil-rights-center/statutes/genetic-information-nondiscrimination-act-of-2008/guidance
Employee Polygraph Protection Act of 1988 (EPPA)
- DoL, Employee Polygraph Protection Act, https://www.dol.gov/agencies/whd/polygraph
- DoL, Fact Sheet #36: Employee Polygraph Protection Act of 1988, https://www.dol.gov/agencies/whd/fact-sheets/36-eppa
5. Conclusion
Remember, don't let the size of this references page intimidate you, and you don't have to visit all the links nor read them all.
I'm just sharing my research for those who want to dive deeper in a particular area.
This lets you start your research where I left off. Do your own research and I don't promise to keep this updated.
This page is hosted at https://johnbandler.com/cippus/part5. Copyright John Bandler, all rights reserved. No claim to IAPP materials or legal references.
Page posted 3/22/2026, drawing upon my previous materials. This page updated 08/11/2026.
These pages will always remain a work-in-progress and I cannot guarantee to keep them accurate or updated. Please contact me if you have an update, suggestion, or correction, and if these free resources helped you, please consider this to give back.

