1 of 1
HOUSE DOCKET, NO. 3051 FILED ON: 1/20/2023
HOUSE . . . . . . . . . . . . . . . No. 1873
The Commonwealth of Massachusetts
_________________
PRESENTED BY:
Dylan A. Fernandes
_________________
To the Honorable Senate and House of Representatives of the Commonwealth of Massachusetts in General
Court assembled:
The undersigned legislators and/or citizens respectfully petition for the adoption of the accompanying bill:
An Act preventing a dystopian work environment.
_______________
PETITION OF:
NAME:DISTRICT/ADDRESS :DATE ADDED:Dylan A. FernandesBarnstable, Dukes and Nantucket1/19/2023 1 of 39
HOUSE DOCKET, NO. 3051 FILED ON: 1/20/2023
HOUSE . . . . . . . . . . . . . . . No. 1873
By Representative Fernandes of Falmouth, a petition (accompanied by bill, House, No. 1873) of
Dylan A. Fernandes relative to preventing dystopian work environments. Labor and Workforce
Development.
The Commonwealth of Massachusetts
_______________
In the One Hundred and Ninety-Third General Court
(2023-2024)
_______________
An Act preventing a dystopian work environment.
Be it enacted by the Senate and House of Representatives in General Court assembled, and by the authority
of the same, as follows:
1 SECTION 1. Chapter 149A of the General Laws, as appearing in the 2020 Official
2Edition, is hereby amended by adding the following chapter:
3 Chapter 149B
4 Section 1. Definitions
5 (a) As used in this chapter, the following words shall, unless a different meaning is
6required by the context or is specifically prescribed, have the following meanings:
7 “Authorized representative” , any person or organization appointed by the worker to
8serve as an agent of the worker. Authorized representative shall not include a worker’s employer.
9 “Automated Decision System (ADS)” or “algorithm” , a computational process,
10including one derived from machine learning, statistics, or other data processing or artificial
11intelligence techniques, that makes or assists an employment-related decision. 2 of 39
12 “Automated Decision System (ADS) output” , any information, data, assumptions,
13predictions, scoring, recommendations, decisions, or conclusions generated by an ADS.
14 “Data,” or “worker data” , any information that identifies, relates to, describes, is
15reasonably capable of being associated with, or could reasonably be linked, directly or indirectly,
16with a particular worker, regardless of how the information is collected, inferred, or obtained.
17Data includes, but is not limited to, the following:
18 (i) Personal identity information, including the individual’s name, contact information,
19government-issued identification number, financial information, criminal background, or
20employment history.
21 (ii) Biometric information, including the individual’s physiological, biological, or
22behavioral characteristics, including the individual’s deoxyribonucleic acid (DNA), that can be
23used, singly or in combination with other data, to establish individual identity.
24 (iii) Health, medical, lifestyle, and wellness information, including the individual’s
25medical history, physical or mental condition, diet or physical activity patterns, heart rate,
26medical treatment or diagnosis by a healthcare professional, health insurance policy number,
27subscriber identification number, or other unique identifier used to identify the individual.
28 (iv) Any data related to workplace activities, including the following:
29 (1) Human resources information, including the contents of an individual’s personnel file
30or performance evaluations.
31 (2) Work process information, such as productivity and efficiency data. 3 of 39
32 (3) Data that captures workplace communications and interactions, including emails,
33texts, internal message boards, and customer interaction and ratings.
34 (4) Device usage and data, including calls placed or geolocation information.
35 (5) Audio-video data and other information collected from sensors, including movement
36tracking, thermal sensors, voiceprints, or faction, emotion, and gait recognition.
37 (6) Inputs of or outputs generated by an ADS that are linked to the individual.
38 (7) Data that is collected or generated on workers to mitigate the spread of infectious
39diseases, including COVID-19, or to comply with public health measures.
40 (v) Online information, including an individual’s Internet Protocol (IP) address, private
41social media activity, or other digital sources or unique identifiers associated with a worker.
42 “Department” , the department of labor & workforce development.
43 “Electronic monitoring” , the collection of information concerning worker activities or
44communications by any means other than direct observation, including the use of a computer,
45telephone, wire, radio, camera, electromagnetic, photoelectronic, or photo-optical system.
46 “Employer” , any person who directly or indirectly, or through an agent or any other
47person, employs or exercises control over the wages, benefits, other compensation, hours,
48working conditions, access to work or job opportunities, or other terms or conditions of
49employment, of any worker, including any of the employer’s labor contractors.
50 “Employment-related decision” , any decision made by the employer that affects wages,
51benefits, other compensation, hours, work schedule, performance evaluation, hiring, discipline, 4 of 39
52promotion, termination, job content, assignment of work, access to work opportunities,
53productivity requirements, workplace health and safety, and other terms or conditions of
54employment. For independent contractors or job applicants, this means the equivalent of these
55decisions based on their contract with or relationship to the employer.
56 “Essential job functions” , the fundamental duties of a position, as revealed by objective
57evidence, including the amount of time workers spend performing each function, the
58consequences of not requiring individuals to perform the function, the terms of any applicable
59collective bargaining agreement, workers’ past and present work experiences and performance in
60the position in question, and the employer’s reasonable, nondiscriminatory judgment as to which
61functions are essential. Past and current written job descriptions and the employer’s reasonable,
62nondiscriminatory judgment as to which functions are essential may be evidence as to which
63functions are essential for achieving the purposes of the job, but may not be the sole basis for this
64determination absent the objective evidence described in this section.
65 “Impact assessment” , the ongoing study and evaluation of a data collection system or an
66automated decision system and its impact on workers.
67 “Productivity system” , a management system that monitors, evaluates, or sets the
68amount and quality of work done in a set time period by workers.
69 “Secretary” , the secretary of the executive office of labor and workforce development
70 “Third party” , a person who is not one of the following:
71 (i) The employer.
72 (ii) A vendor or service provider to the employer. 5 of 39
73 (iii) A labor or employee organization within the meaning of state or federal law.
74 “Worker” , any natural person or their authorized representative acting as a job applicant
75to, an employee of, or an independent contractor providing service to, or through, a business in
76any workplace. This term includes state workers, with the limitations established in section 6.
77 “State worker”, any natural person or their authorized representative acting as a job
78applicant to, an employee of, or an independent contractor providing service to, or through, a
79state or local governmental entity in any workplace.
80 “Worker Information System (WIS)” , a process, automated or not, that involves worker
81data, including the collection, recording, organization, structuring, storage, alteration, retrieval,
82consultation, use, sharing, disclosure, dissemination, combination, restriction, erasure, or
83destruction of worker data. A WIS does not include an ADS.
84 “Workplace” , a location within Massachusetts at which or from which a worker
85performs work for an employer.
86 “Vendor” , an entity engaged by an employer or an employer’s labor contractors, to
87provide software, technology, or a related service that is used to collect, store, analyze, or
88interpret worker data or worker information.
89 Section 2. Notice of data collection
90 (a)An employer that controls the collection of worker data shall, at or before the
91point of collection, inform the workers as to all of the following: 6 of 39
92 (i)The specific categories of worker data to be collected, the specific purpose for
93which the specific categories of worker data are collected or used, and whether and how the data
94is related to the worker’s essential job functions.
95 (ii)Whether and how the data will be used to make or assist an employment-related
96decision, including any associated benchmarks.
97 (iii)Whether the data will be deidentified.
98 (iv)Whether the data will be used at the individual level, in aggregate form, or both.
99 (v)Whether the information is being disclosed or otherwise transferred to a vendor or
100other third party, the name of the vendor or third party, and for what purpose.
101 (vi)The length of time the employer intends to retain each category of worker data.
102 (vii)The worker’s right to access and correct their worker data.
103 (viii)Any data protection impact assessments, and the identity of any worker
104information systems, that are the subject of an active investigation by the department.
105 (b)Notice may be given after the point of collection only if at least one of the
106following conditions is met:
107 (i)Collection is necessary to preserve the integrity of an investigation of
108wrongdoing.
109 (ii)Earlier notice would violate the requirements of federal, state, or local laws or
110regulations. 7 of 39
111 (iii)Earlier notice would violate a court order.
112 (c)If an employer discloses worker data to a vendor, third party, or state or local
113government, the employer must provide affected workers with notice that includes the
114information specified in subsection (a).
115 (d) An employer shall provide a copy of the above notice to the department.
116 Section 2A. Right of employee to request information
117 (a)An employer, or a vendor acting on behalf of an employer, that collects, stores,
118analyzes, interprets, disseminates, or otherwise uses worker data shall provide the following
119information to the worker, in an accessible manner, upon receipt of a verifiable request:
120 (i)The specific categories and specific pieces of worker data that the employers, or a
121vendor acting on behalf of any employer, retains about that work.
122 (ii)The sources from which the data is collected.
123 (iii)The purpose for collecting, storing, analyzing, or interpreting the worker data.
124 (iv)Whether and how the data is related to the worker’s essential job functions,
125including whether and how the data is used to make or assist an employment-related decision.
126 (v)Whether the data is being used as an input in an ADS, and if so, what ADS output
127is generated based on the data.
128 (vi)Whether the data was generated as an output of an ADS. 8 of 39
129 (vii)The names of any vendors or third parties, from whom the worker data was
130obtained, or to whom an employer or vendor acting on behalf of an employer has disclosed the
131data, and the specific categories of data that was obtained or disclosed.
132 (b) When complying with a worker’s request for data access, the employer shall not
133disclose personal identity information of any individual other than the worker who submitted the
134request.
135 (c) Information provided by an employer or a vendor acting on behalf of an
136employer to a worker pursuant to subsection (a) shall be provided as follows:
137 (i)At no cost to the worker.
138 (ii)In an accessible format that allows the worker to transport it to another entity
139without hindrance.
140 (iii)In a timely manner upon receipt of the verifiable request.
141 (d)For purposes of this section, a “verifiable request” is a request made by a worker
142that the business can reasonably verify.
143 Section 2B. Data accuracy
144 (a)An employer shall ensure that worker data is accurate and, where relevant, kept
145up to date.
146 (b)A worker shall have the right to request an employer to correct any inaccurate
147worker data about the worker that the employer maintains. 9 of 39
148 (c)An employer that receives a verifiable request to correct inaccurate worker data
149shall respond to the worker’s request as follows:
150 (i)An employer shall investigate and determine whether the disputed worker data is
151inaccurate.
152 (1)If an employer determines that the disputed worker data is inaccurate, the
153employer shall do all of the following:
154 a) Promptly correct the disputed worker data and inform the worker of the
155employer’s decision and action.
156 b) Review and adjust as appropriate any employment-related decisions or ADS
157outputs that were partially or solely based on the inaccurate data, and inform the worker of the
158adjustment.
159 c) Inform any third parties with which the employer shared the inaccurate worker
160data, or from which the employer received the inaccurate worker data, and direct them to correct
161it.
162 (2)If an employer, upon investigation, determines that the disputed worker data is
163accurate, the employer shall inform the worker of the following:
164 a) The decision not to amend the disputed worker data.
165 b) The steps taken to verify the accuracy of the worker data and the evidence
166supporting the decision not to amend the disputed worker data. 10 of 39
167 (ii)An employer is not obligated to change the disputed worker data when the
168disputed worker data consists of subjective information, opinions, or other non verifiable facts, if
169the employer does all of the following:
170 (1)Documents that the disputed worker data consists of subjective information and
171notes the source of the subjective information.
172 (2)Informs the worker of its decision to deny the request to change the disputed
173worker data.
174 (iii)An employer shall not process, use, or make any employment-related decision
175based on disputed worker data while the employer is in the process of determining its accuracy.
176 Section 2C. Management of Worker Data
177 (a)An employer or vendor acting on behalf of an employer shall not collect, store,
178analyze, or interpret worker data unless the data is strictly necessary to accomplish any of the
179following purposes:
180 (i)Allowing a worker to accomplish an essential job function.
181 (ii)Monitoring production processes or quality.
182 (iii)Assessment of worker performance.
183 (iv)Ensuring compliance with employment, labor, or other relevant laws.
184 (v)Protecting the health, safety, or security of workers. 11 of 39
185 (vi)Additional purposes to enable business operations as determined by the
186department.
187 (b)An employer or a vendor acting on behalf of an employer shall not collect, store,
188analyze or interpret worker data unless such collection, storage, analysis, or interpretation is:
189 (i)necessary to accomplish a purpose mentioned in (a);
190 (ii)the least invasive means that could reasonably be used to accomplish such
191purpose; and
192 (iii)limited to the smallest number of workers.
193 (c)An employer or vendor acting on behalf of an employer shall collect, store,
194analyze and interpret the least amount of worker necessary to accomplish the purpose mentioned
195in (a).
196 (d)An employer or a vendor acting on behalf of an employer shall not use worker
197data for purposes other than those specified in the provided notice.
198 (e)An employer or a vendor acting on behalf of an employer shall not sell or license
199worker data, including deidentified or aggregated data, to a vendor or third party, including
200another employer.
201 (f)An employer or vendor acting on behalf of an employer shall not disclose or
202transfer worker data to a vendor or third party unless the following conditions are met:
203 (i)Vendor or third-party access to the worker data is pursuant to a contract with the
204employer and the contract prohibits the sale or licensing of the data. 12 of 39
205 (ii)The vendor or third party implements reasonable security procedures and
206practices appropriate to the nature of the worker data to protect the data from unauthorized or
207illegal access, destruction, use, modification, or disclosure.
208 (g)An employer or vendor acting on behalf of an employer shall not transfer or
209otherwise disclose biometric, health, or wellness data to any third party unless required under
210state or federal law.
211 (h)An employer or vendor acting on behalf of an employer shall not share worker
212data with the state or local government unless allowed under this part or otherwise necessary to
213do the following:
214 (i)Provide information to the department as required by this part.
215 (ii)Comply with the requirements of federal, state, or local law or regulation.
216 (iii)Comply with a court-issued subpoena, warrant, or order.
217 (i)An employer or vendor acting on behalf of an employer that is in possession of
218biometric, health, or wellness data shall permanently destroy that data when the initial purpose
219for collecting the data has been satisfied or at the end of the worker’s relationship with the
220employer, unless there is a reasonable interest for the worker to access the data after the
221relationship has ended.
222 (j)An employer or vendor acting on behalf of an employer shall not use biometric,
223health or wellness data, including a worker’s decision not to participate in a wellness program, as
224a basis for any employment-related decision. 13 of 39
225 (k) An employer or vendor acting on behalf of an employer shall not use worker data
226as a basis for any employment-related decision if the collection of such data prevents compliance
227with meal or rest periods, use of bathroom facilities, including reasonable travel time to and from
228bathroom facilities, or occupational health and safety laws, as appearing in the General Laws. An
229employer shall not take adverse employment action against an employee, including changes to a
230worker’s wages, based upon an employee’s use of meal or rest periods, use of bathroom
231facilities, including reasonable travel time to and from bathroom facilities, or occupational health
232and safety laws, as appearing in General Laws.
233 Section 2D. Data security
234 (a)An employer that collects, stores, analyzes, interprets, disseminates, or otherwise
235uses worker data shall undertake its best efforts to implement, maintain, and keep up-to-date
236security protections that are appropriate to the nature of the data, and to protect the data from
237unauthorized access, destruction, use, modification, or disclosure. The security program shall
238include administrative, technical, and physical safeguards.
239 (b)An employer that collects, stores, analyzes, interprets, disseminates, or otherwise
240uses worker data in any form and that becomes aware of a breach of the security of worker data
241shall promptly provide written notice to each affected worker. The employer shall provide a
242description of the specific categories of data that were, or are reasonably believed to have been,
243accessed or acquired by an unauthorized person, and what steps it will take to address the impact
244of the data breach on affected workers. The notification shall be made in the most expedient time
245possible. The employer shall promptly notify the department in writing of such a breach.
246 Section 2E. Vendor requirements 14 of 39
247 (a)A vendor that collects, stores, analyzes, interprets, disseminates, or otherwise uses
248worker data on behalf of an employer shall comply with the requirements of this chapter, and
249employers are jointly and severally liable if the vendor fails to do so.
250 (b)A vendor that collects, stores, analyzes, interprets, disseminates, or otherwise uses
251worker data on behalf of the employer must provide all necessary information to the employer to
252enable the employer to comply with the requirements of this chapter.
253 (c)A vendor that collects, stores, analyzes, or interprets worker data on behalf of the
254employer shall do all of the following upon termination of the contract with the employer:
255 (i)Return all of the worker data to the employer.
256 (ii)Delete all of the worker data.
257 Section 3. Electronic monitoring notice
258 (a)An employer or vendor acting on behalf of an employer that is planning to
259electronically monitor a worker shall provide a worker with notice that electronic monitoring
260will occur prior to conducting each specific form of electronic monitoring. Notice shall include,
261at a minimum, the following elements:
262 (i)A description of the allowable purpose that the specific form of electronic
263monitoring is intended to accomplish, as specified in section 2C.
264 (ii)A description of the specific activities, locations, communications, and job roles
265that will be electronically monitored. 15 of 39
266 (iii)A description of the technologies used to conduct the specific form of electronic
267monitoring and the worker data that will be collected as a part of the electronic monitoring.
268 (iv)Whether the data gathered through electronic monitoring will be used to make or
269inform an employment-related decision, and if so, the nature of that decision, including any
270associated benchmarks.
271 (v)Whether the data gathered through electronic monitoring will be used to assess
272workers’ productivity performance or to set productivity standards, and if so, how.
273 (vi)The names of any vendors conducting electronic monitoring on the employer’s
274behalf and any associated contract language related to that monitoring.
275 (vii)A description of a vendor or third party to whom information collected through
276electronic monitoring will be disclosed or transferred. The description will include the name of
277the vendor and the purpose for the data transfer.
278 (viii)A description of the organizational positions that are authorized to access the data
279gathered through the specific form of electronic monitoring and under what conditions.
280 (ix)A description of the dates, times, and frequency that electronic monitoring will
281occur.
282 (x)A description of where the data will be stored and the length it will be retained.
283 (xi)An explanation of why the specific form of electronic monitoring is strictly
284necessary to accomplish an allowable purpose described in subsection (a) of section 3C. 16 of 39
285 (xii)An explanation for how the specific monitoring practice is the least invasive
286means available to accomplish the allowable monitoring purpose as outlined in subsection (a) of
287section 3C.
288 (xiii)Notice of the workers’ right to access or correct the data.
289 (xiv)Notice of the workers’ right to recourse under section 6.
290 (b)Notice of the specific form of electronic monitoring shall be clear and
291conspicuous and provide the worker with actual notice of electronic monitoring activities. A
292notice that states electronic monitoring “may” take place or that the employer “reserves the
293right” to monitor shall not be considered clear and conspicuous.
294 (c)(1) An employer who engages in random or periodic electronic monitoring of
295workers shall inform the affected workers of the specific events which are being monitored at the
296time the monitoring takes place. Notice shall be clear and conspicuous. (2) Notice of random or
297periodic electronic monitoring may be given after electronic monitoring has occurred only if
298necessary to preserve the integrity of an investigation of illegal activity or protect the immediate
299safety of workers, customers, or the public.
300 (d)Employers shall provide a copy of the disclosure required by this section to the
301department.
302 Section 3A. Notice of change
303 An employer shall provide additional notice to workers when a significant update or
304change is made to the electronic monitoring or in how the employer is using it.
305 Section 3B. Notice of systems in use 17 of 39
306 (a) An employer shall maintain an updated list of electronic monitoring systems currently
307in use.
308 (b) (i) An employer shall annually, by January 1 of each year, provide notice to workers
309of all electronic monitoring systems currently in use. The notice shall include the information
310specified in subsection (a) of section 3.
311 (ii) An employer shall provide a copy of the notice provided pursuant to paragraph (1) to
312the department no later than January 31 of that year.
313 Section 3C. Restrictions on implementation of electronic monitoring
314 (a)An employer or vendor acting on behalf of an employer shall not electronically
315monitor a worker unless all of the following conditions are met:
316 (i)The electronic monitoring is primarily intended to accomplish any of the
317following allowable purposes:
318 (1)Allowing a worker to accomplish an essential job function.
319 (2)Monitoring production processes or quality.
320 (3)Assessment of worker performance.
321 (4)Ensuring compliance with employment, labor, or other relevant laws.
322 (5)Protecting the health, safety, or security of workers.
323 (6)Administering wages and benefits. 18 of 39
324 (7)Additional electronic monitoring purposes to enable business operations as
325determined by the department.
326 (ii)The specific form of electronic monitoring is strictly necessary to accomplish the
327allowable purpose and is the least invasive means to the worker that could reasonably be used to
328accomplish the allowable purpose.
329 (iii)The specific form of electronic monitoring is limited to the smallest number of
330workers and collects the least amount of data necessary to accomplish the allowable purpose.
331 (iv)The information collected via electronic monitoring will be accessed only by
332authorized agents and used only for the purpose and duration for which authorization was given
333as specified in the notice required by section 3.
334 (b)Notwithstanding the allowable purposes for electronic monitoring described in
335paragraph (i) of subsection (a), the following practices are prohibited:
336 (i)The use of electronic monitoring that results in a violation of labor and
337employment laws.
338 (ii)The use of electronic monitoring that prevents compliance with meal or rest
339periods, use of bathroom facilities, including reasonable travel time to and from bathroom
340facilities, or occupational health and safety laws, as appearing in the General Laws.
341 (iii)The monitoring of workers who are off-duty and not performing work-related
342tasks.
343 (iv)The monitoring of workers in order to identify workers exercising their legal
344rights, including, but not limited to, rights guaranteed by employment and labor law. 19 of 39
345 (v)Audio-visual monitoring of bathrooms or other similarly private areas, including
346locker rooms, changing areas, breakrooms, smoking areas, employee cafeterias, and lounges,
347including data collection on the frequency of use of those private areas.
348 (vi)Audio-visual monitoring of a workplace in a worker’s residence, a worker’s
349personal vehicle, or property owned or leased by a worker, unless that audio-visual monitoring is
350strictly necessary.
351 (vii)Electronic monitoring systems that incorporate facial recognition, gait, or emotion
352recognition technology.
353 (viii)Additional specific forms of electronic monitoring as determined by the
354department.
355 (c)Before an employer uses an electronic productivity system, the employer shall
356submit a summary of the system to the department, including information on the specific form of
357monitoring, the number of workers impacted, the data that will be collected, and how that data
358will be used in making employment-related decisions. Electronic productivity systems must also
359be reviewed by the department of labor standards before implementation to ensure electronic
360productivity systems do not result in physical or mental harm to workers.
361 (d)An employer or a vendor acting on behalf of an employer shall not require
362workers to either install applications on personal devices that collect or transmit worker data or
363to wear, embed, or physically implant those devices, including those that are installed
364subcutaneously or incorporated into items of clothing or personal accessories, unless the
365electronic monitoring is strictly necessary to accomplish essential job functions and is narrowly
366limited to only the activities and times necessary to accomplish essential job functions. Location- 20 of 39
367tracking applications and devices shall be disabled outside the activities and times necessary to
368accomplish essential job functions.
369 Section 3D. Employer use of electronic monitoring data
370 (a)An employer or vendor acting on behalf of an employer shall use worker data
371collected through electronic monitoring only to accomplish its specified allowable purpose.
372 (b)An employer or vendor acting on behalf of an employer shall not solely rely on
373worker data collected through electronic monitoring when making hiring, promotion,
374termination, or disciplinary decisions.
375 (i)An employer shall conduct its own assessment before making hiring, promotion,
376termination, or disciplinary decisions independent of worker data gathered through electronic
377monitoring. This includes corroborating the electronic monitoring worker data by other means,
378including a supervisor’s documentation or managerial documentation.
379 (ii)If an employer cannot independently corroborate the worker data gathered
380through electronic monitoring, the employer shall not rely upon that data in making hiring,
381promotion, termination, or disciplinary decisions.
382 (iii)The information and judgements involved in an employer’s corroboration or use
383of electronic monitoring data shall be documented and communicated to affected workers prior
384to the hiring, promotion, termination, or disciplinary decision going into effect.
385 (iv)Data that provides evidence of criminal activity, when independently corroborated
386by the employer, is exempt from subsection (b). 21 of 39
387 (c)An employer or vendor acting on behalf of an employer shall not solely rely on
388worker data collected through electronic monitoring when determining a worker’s wages.
389
390 Section 4. Automated decision systems
391 (a)An employer or a vendor acting on behalf of any employer shall provide
392sufficient notice to workers prior to adopting an ADS. An employer with an existing ADS at the
393time this part takes effect shall provide notice pursuant to this section within 30 day after this
394part takes effect.
395 (b)Notice required by subsection (a) shall be considered sufficient if it meets at least
396the following requirements:
397 (i)The notice is provided within a reasonable time prior to the use of the ADS.
398 (ii)The notice is provided to all workers affected by the ADS in the manner in which
399routine communications are provided to workers.
400 (iii)The notice contains the following information:
401 (1)The nature, purpose, and scope of the decisions for which the ADS will be used,
402including the range of employment-related decisions potentially affected and how, including any
403associated benchmarks.
404 (2)The type of ADS outputs.
405 (3)The specific category and sources of worker data that the ADS will use. 22 of 39
406 (4)The individual, vendor, or entity that created the ADS.
407 (5)The individual, vendor, or entity that will run, manage, and interpret the results of
408the ADS.
409 (6)The right to recourse pursuant to section 6 of this chapter.
410 (c)An employer or vendor acting on behalf of an employer shall provide a copy of
411the notice to the department within 10 days of distribution to workers.
412 Section 4A. Notice of change of automated decision systems
413 An employer or vendor acting on behalf of an employer shall provide additional notice to
414workers when any significant updates or changes are made to the ADS or in how the employer is
415using the ADS.
416 Section 4B. Tracking automated decision systems in use
417 (a)An employer or vendor acting on behalf of an employer shall maintain an updated
418list of all ADS currently in use.
419 (b)An employer shall annually, on or before January 1 of each year, provide notice to
420workers of all ADS currently in use. The notice shall include the information required by
421paragraph (iii) of subsection (b) of section 4.
422 (c)The notice shall be submitted to the department on or before January 31 of each
423year.
424 Section 4C. Use of automated decision systems for employment decisions; productivity
425systems 23 of 39
426 (a)An employer or vendor acting on behalf of an employer shall not use an ADS to
427make employment-related decisions in any of the following ways:
428 (i)Use of an ADS that results in a violation of labor or employment law.
429 (ii)Use of an ADS to make predictions about a worker’s behavior that are unrelated
430to the worker’s essential job functions.
431 (iii)Use of an ADS to identify, profile, or predict the likelihood of workers exercising
432their legal rights.
433 (iv)Use of an ADS that draws on facial recognition, gait, or emotion recognition
434technologies, or that makes predictions about a worker’s emotions, personality, or other types of
435sentiments.
436 (v)Use of customer ratings as input data for an ADS.
437 (vi)Any additional use of an ADS that poses harm to workers prohibited by the
438department pursuant to section 6(b).
439 (b)Before an employer or a vendor acting on behalf of an employer uses a
440productivity system that uses algorithms, the employer shall submit a summary of the system to
441the department. The summary shall include all of the following information:
442 (i)The role and nature of the algorithm’s use.
443 (ii)The number of workers impacted by the system.
444 (iii)The nature of the algorithmic output. 24 of 39
445 (iv)How the algorithmic output will be used in making employment-related decisions.
446 (c)Productivity systems that use algorithms shall also be reviewed by the department
447of labor standards’ occupational safety and health statistics program before implementation to
448ensure that electronic productivity systems do not result in physical or mental harm to workers.
449 (d)This section shall not be construed to conflict with the powers of the executive
450office of labor and workforce development.
451 Section 4D. Restrictions on employer or vendor use of automated decision systems
452 (a)An employer or vendor acting on behalf of an employer shall not use ADS
453outputs regarding a worker’s health as a basis for any employment-related decision.
454 (b)An employer or vendor acting on behalf of an employer shall not solely rely on
455output from an ADS when determining employee wages.
456 (c)An employer or vendor acting on behalf of an employer shall not solely rely on
457output from an ADS to make a hiring, promotion, termination, or disciplinary decision.
458 (i)An employer shall conduct its own evaluation of the worker before making a
459hiring, promotion, termination, or disciplinary decision, independent of the output used from the
460ADS. This includes establishing meaningful human oversight by a designated internal reviewer
461to corroborate the ADS output by other means, including supervisory or managerial
462documentation, personnel files, or the consultation of coworkers.
463 (ii)Meaningful human oversight requires that the designated internal reviewer meet
464the following conditions: 25 of 39
465 (1)The designated internal reviewer is granted sufficient authority, discretion,
466resources, and time to corroborate the ADS output.
467 (2)The designated internal reviewer has sufficient expertise in the operation of
468similar systems and a sufficient understanding of the ADS in question to interpret its outputs as
469well as results of relevant algorithmic impact assessments.
470 (3)The designated internal review has education, training, or experience sufficient to
471allow the reviewer to make a well-informed decision.
472 (iii)When an employer cannot corroborate the ADS output produced by the ADS, the
473employer shall not rely on the system to make the hiring, promotion, termination, or disciplinary
474decision.
475 (iv)When an employer can corroborate the ADS output and makes the hiring,
476promotion, termination, or disciplinary decision based on that output, a notice containing the
477following information shall be given to affected workers:
478 (1)The specific decision for which the ADS was used.
479 (2)Any information or judgments used in addition to the ADS output in making the
480decision.
481 (3)The specific worker data that the ADS used.
482 (4)The individual, vendor, or entity who created the ADS.
483 (5)The individual or entity that executed and interpreted the results of the ADS. 26 of 39
484 (6)A copy of any completed algorithmic impact assessments regarding the ADS in
485question.
486 (7)Notice of the worker’s right to dispute an algorithmic impact assessment
487regarding the ADS in question pursuant to section 5C.
488 (8)The right to recourse pursuant to section 6 of this chapter.
489 (v)When an employer uses corroborated output from an ADS to make a hiring,
490promotion, termination, or disciplinary decision, notice shall be given to the affected worker
491prior to the implementation of that decision.
492 Section 4E. Requirements for vendor use of automated decision systems
493 (a)A vendor that uses an ADS on behalf of an employer shall comply with the
494requirements of this chapter. An employer is jointly and severally liable for a vendor’s failure to
495comply.
496 (b)A vendor that uses an ADS on behalf of an employer shall provide all necessary
497information to the employer to enable the employer to comply with the requirements of this
498chapter.
499 (c) A vendor that collects or stores worker data in order to use an ADS on behalf of
500an employer shall do both of the following upon termination of its contract with the employer:
501 (i)Return all of the worker data, including any relevant ADS outputs, to the
502employer.
503 (ii)Delete all worker data. 27 of 39
504 Section 5. Algorithmic impact assessments
505 (a) An employer that develops, procures, uses, or otherwise implements an ADS to
506make or assist an employment-related decision shall complete an Algorithmic Impact
507Assessment (AIA) prior to using the system, and retroactively for any ADS that is in place at the
508time this part takes effect, for each separate position for which the ADS will be used to make an
509employment-related decision. When an employer procures an ADS from a vendor, the employer
510may submit an AIA conducted by the vendor if it meets all of the requirements set forth in this
511chapter.
512 (b)An “Algorithmic Impact Assessment (AIA)” means a study evaluating an ADS
513that makes or assists an employment-related decision and its development process, including the
514design and training data of the ADS, for negative impacts on workers. An AIA shall include, at
515minimum, all of the following:
516 (i)A detailed description of the ADS and its intended purpose.
517 (ii)A description of the data used by the ADS, including the specific categories of
518data that will be processed as input and any data used to train the model that the ADS relies on.
519 (iii)A description of the outputs produced by the ADS, including the following:
520 (1)The types of ADS outputs produced by the ADS.
521 (2)How to interpret the ADS outputs.
522 (3)The types of employment-related decisions that may be made on the basis of the
523ADS outputs. 28 of 39
524 (iv)An assessment of the necessity and proportionality of the ADS in relation to its
525purpose, including reasons for the superiority of the ADS over non automated decision making
526methods.
527 (v)An evaluation of the risk of the ADS, including the following risks:
528 (1)Errors, including both false positives and false negatives.
529 (2)Discrimination against protected classes.
530 (3)Violation of legal rights of affected workers.
531 (4)Direct or indirect harm to the physical health, mental health, or safety of affected
532workers.
533 (5)Chilling effect on workers exercising legal rights, including, but not limited to,
534rights guaranteed by employment and labor laws.
535 (6)Privacy harms, including the risks of security breach or inadvertent disclosure.
536 (7)Negative economic impacts or other negative material impacts on workers,
537including, but not limited to, impacts related to wages, benefits, other compensation, hours, work
538schedule, performance evaluation, hiring, discipline, promotion, termination, assignment of
539work, access to work opportunities, job responsibilities, and productivity requirements.
540 (8)Infringement on the dignity and autonomy of affected workers.
541 (vi)The specific measures that will be taken to minimize or eliminate the identified
542risks. 29 of 39
543 (vii)A description of the methodology used to evaluate the identified risks and
544mitigation measures.
545 (viii)Any additional components necessary to evaluate the negative impacts of an ADS
546as determined by the department.
547 Section 5A. Data protection impact assessments
548 (a)An employer that develops, procures, uses, or otherwise implements a Worker
549Information System (WIS) shall complete a Data Protection Impact Assessment prior to using
550the system, or retroactively for a WIS in place prior to the effective date of this part. When an
551employer procures a WIS from a vendor, the employer may submit an impact assessment
552conducted by the vendor, if it meets all of the requirements set forth in this section.
553 (b)A “Data Protection Impact Assessment (DPIA)” means a study evaluating a WIS
554for negative impacts on workers. A DPIA shall include, at minimum, all of the following:
555 (i) A systematic description of the nature, scope, context, and purpose of the WIS.
556 (ii)An assessment of the necessity and proportionality of the WIS in relation to its
557purpose.
558 (iii)An evaluation of the potential risks of the WIS, including the following risks:
559 (1)Violation of the legal rights of affected workers.
560 (2)Discrimination against protected classes.
561 (3)Privacy harms, including the risks of invasive or offensive surveillance, security
562breach, or inadvertent disclosure. 30 of 39
563 (4)Chilling effect on workers exercising legal rights, including, but not limited to,
564rights guaranteed by employment and labor laws.
565 (5)Infringement upon the dignity and autonomy of affected workers.
566 (6)Negative economic impacts or other negative material impacts on affected
567workers, including on dimensions including wages, benefits, other compensation, hours, work
568schedule, performance evaluation, hiring, discipline, promotion, termination, job content,
569assignment of work, access to work opportunities, and productivity requirements.
570 (iv)The specific measures that will be taken to minimize or eliminate the identified
571risks.
572 (v)A description of the methodology used to evaluate the identified risks and
573recommended mitigation measures.
574 (vi)Any additional components necessary to evaluate the negative impacts of a WIS
575determined by the department.
576 Section 5B. Proper use of impact assessments
577 (a)The AIA or DPIA shall be conducted by an independent assessor with relevant
578experience.
579 (b)An employer shall initiate an AIA or DPIA at the beginning of the procurement or
580development process for any ADS or WIS, or retroactively for any ADS or WIS in place at the
581time this part takes effect. An AIA or DPIA shall be continuously updated throughout the
582procurement, development, or implementation process and thereafter to reflect any material
583changes to the ADS or WIS as they become evident. 31 of 39
584 (c)An employer shall fully comply with all requests from the assessor for
585information required to conduct the AIA or DPIA.
586 (d)(i) Throughout the assessment process, the assessor shall consult with workers
587who are potentially affected by the ADS or WIS. Consultation shall include, but is not limited to,
588the following stages:
589 (1) Identification of the specific risks that need to be evaluated.
590 (2)Development of mitigation measures to minimize the risks associated with the
591system.
592 (ii)An assessor shall make the preliminary assessment available to potentially
593affected workers for anonymous review and comment during a defined open comment period.
594 (1)An employer shall not retaliate against a worker who participates in the open
595comment period.
596 (2)A worker or a designated worker representative may comment or request
597additional information.
598 (3)An assessor shall incorporate a record of the feedback received and a description
599of why the suggestions were either incorporated or rejected.
600 (4)An assessor shall ensure that potentially affected workers are adequately informed
601of their ability to review and comment on the AIA or DPIA.
602 (e)An employer shall submit and update, as needed, the completed AIA or DPIA to
603the department and potentially affected workers prior to the use of the ADS or WIS. 32 of 39
604 (i)If health and safety risks are found or implicated, an employer shall also submit
605its assessment to the Occupational Safety and Health Administration.
606 (ii)If a risk of discrimination or bias is detected or believed to exist, an employer
607shall also submit its assessment to the state agency overseeing workplace discrimination.
608 (f)An employer may use the ADS or WIS once it submits the relevant impact
609assessments to the department, unless the department directs otherwise, as described in
610subsection (g).
611 (g) Upon review of the AIA or DPIA, the department may require any of the
612following:
613 (i)Require the employer to submit additional documentation.
614 (ii)Require the employer to implement mitigation measures in using the ADS or
615WIS.
616 (iii)Prohibit the employer from using the ADS or WIS.
617 (h)Upon submitting the AIA or DPIA to the department, the employer shall develop
618and publish on its internet website an impact assessment summary that describes the
619assessment’s methodology, findings, results, and conclusions for each element required by this
620part, as well as any modification made to it based on the assessment results.
621 (i)The AIA or DPIA and its summary shall be written in a manner that is precise,
622transparent, comprehensible, and easily accessible. 33 of 39
623 (j)The full AIA or DPIA and all relevant materials and sources used for the
624development of the assessment may be made available to external researchers at the discretion of
625the department.
626 Section 5C. Disputed impact assessments
627 (a)At any point after an employer has submitted an AIA or DPIA to the department,
628a worker may anonymously dispute the AIA or DPIA and request that the department conduct an
629investigation of the employer. The following are bases for challenging an AIA or DPIA:
630 (i)The AIA or DPIA provided insufficient information, was incomplete, or
631inaccurate.
632 (ii)The AIA or DPIA assessor was not adequately independent from the employer.
633 (iii)The AIA or DPIA failed to adequately identify risks or appropriately weigh harms
634against benefits.
635 (iv)Mitigation measures identified in the AIA or DPIA were not implemented or,
636once implemented, failed to reduce residual risks to acceptable levels.
637 (v)Any other reason the AIA or DPIA was defective or incomplete as identified by
638the department.
639 (b)If an employer fails to conduct an impact assessment of an ADS or WIS used in
640making or assisting an employment-related decision, a worker may anonymously request that the
641department conduct an investigation of the employer. 34 of 39
642 (c)Regardless of the use or outcome of the dispute processes available in this section,
643a worker retains the right to recourse pursuant to section 6.
644 Section 5D. Requirements for vendor implementation of impact assessments
645 (a) A vendor that develops, procures, uses, or otherwise implements an ADS or WIS
646on behalf of an employer shall comply with the requirements of this chapter. An employer shall
647be jointly and severally liable for a vendor’s failure to comply.
648 (b)A vendor that develops, procures, uses, or otherwise implements an ADS or WIS
649on behalf of an employer shall provide all necessary information to the employer to enable the
650employer to comply with the requirements of this chapter.
651 (c)A vendor that develops, procures, uses, or otherwise implements an ADS or WIS
652on behalf of an employer shall provide any additional information, as requested by the
653independent assessor or department, necessary to conduct an assessment or investigation.
654 Section 6. Enforcement
655 (a)(i) A worker may bring a civil action for injunctive relief and recover civil
656penalties against the employer in an amount equal to the penalties provided in this section. A
657plaintiff who brings a successful civil action for violation of these provisions is entitled to
658recover reasonable attorney’s fees and costs.
659 (ii) An employer or vendor that violates this section shall be subject to an injunction
660 and liable for civil penalties provided in this chapter, which shall be assessed and
661recovered in a civil action by the attorney general. In a successful civil action brought by the 35 of 39
662attorney general to enforce this part, the court may grant injunctive relief in order to obtain
663compliance with the part and shall award costs and reasonable attorney’s fees.
664 (iii) An employer shall not retaliate against a worker because the worker exercised, or
665 notified another worker of their right to exercise, any of the rights under this
666 section.
667 (iv) Provisions of a collective bargaining agreement that provide additional worker
668 protections are not superseded by this part.
669 (b) The department shall have the authority to enforce and assess penalties under this
670part and to adopt regulations relating to the procedures for an employee to make a complaint
671alleging a violation of this section.
672 (i)On or before January 1, 2025, the department shall adopt regulations to further the
673purpose of this section, including, but not limited to, regulations on all of the following:
674 (1)Developing, maintaining, and regularly updating the following:
675 a) A list of allowable purposes for data collection and electronic monitoring.
676 b) Definitions of specific categories of worker data required in notices mandated in
677this part.
678 c) A list of prohibited forms of electronic monitoring.
679 d) A list of prohibited ADS. 36 of 39
680 e) A list of valid reasons for disputing an employer’s AIA or DPIA and requesting
681investigation by the department.
682 f) Rules specifying employers’ and workers’ respective obligations to ensure
683occupational health and safety in home offices, personal vehicles, and other workplaces owned,
684leased, or regularly used or occupied during non-work hours by a worker. The rules shall specify
685the manner, means, and frequency with which employers may collect data or electronically
686monitor those workplaces in order to satisfy the employers’ obligation under applicable
687occupational health and safety laws.
688 g) The specific requirements of the notices required by this part.
689 h) Any additional rules and standards, as needed, to respond to the rapid
690developments in existing and new technologies introduced in the workplace in order to prevent
691harm to the health and well-being of workers.
692 (2)Developing agency procedures to review and evaluate employers’ submissions of
693AIA, DPIA, and summaries of electronic productivity systems.
694 (ii)To assist in developing the regulations required by subsection (b), the secretary
695shall convene an advisory committee to recommend best practices to mitigate harms to workers
696from the use of data-driven technology in the workplace. The advisory committee shall be
697composed of stakeholders and other related subject matter experts and shall also include
698representatives of the department of labor standards, and the occupational safety and health
699administration. The secretary shall convene the advisory committee no later than March 1, 2024. 37 of 39
700 (iii)The department shall strategically collaborate with stakeholders to educate
701workers and employers about their rights and obligations under this part, respectively, in order to
702increase compliance.
703 (c)(i) An employer or vendor acting on behalf of an employer who fails to comply
704with section 2 through 2D of this chapter is subject to the following penalties:
705 (1)A violation of section 2 shall be subject to a penalty of ten thousand dollars
706($10,000) per violation.
707 (2)A violation of section 2A shall be subject to a penalty of five thousand dollars
708($5,000) for each verified request made by a worker.
709 (3)A violation of section 2B shall be subject to a penalty of five thousand dollars
710($5,000) per violation.
711 (4)A violation of section 2C shall be subject to a penalty of twenty thousand dollars
712($20,000) per violation.
713 (5)A violation of section 2D shall be subject to a penalty of one hundred dollars
714($100) per affected worker for each violation of this provision.
715 (ii)An employer or vendor acting on behalf of an employer who fails to comply with
716sections 3 through 3D of this chapter is subject to the following penalties:
717 (1)A violation of section 3 shall be subject to a penalty of ten thousand dollars
718($10,000) per violation. 38 of 39
719 (2)A violation of section 3C shall be subject to a penalty of five thousand dollars
720($5,000) for each day that the violation occurs.
721 (3)A violation of Section 3D shall be subject to a penalty of ten thousand dollars
722($10,000) per worker for each violation.
723 (iii)An employer or vendor acting on behalf of an employer who fails to comply with
724sections 4 through 4D is subject to the following penalties:
725 (1)A violation of section 4, 4A, or 4D shall be subject to a penalty of ten thousand
726dollars ($10,000) per violation.
727 (2)(2) A violation of section 4B shall be subject to a penalty of two thousand five
728hundred dollars ($2,500) per violation.
729 (3)(3) A violation of section 4C shall be subject to a penalty of twenty thousand
730dollars ($20,000) per violation.
731 (iv)An employer or vendor acting on behalf of an employer who fails to submit an
732impact assessment pursuant to sections 5, 5A, 5B, or 5C shall be subject to a penalty of twenty
733thousand dollars ($20,000) per violation.
734 Section 6.
735 (a)The provisions in sections 2 through 6 shall apply to state workers so long as they
736are not construed or applied to displace or supplant state rules and regulations and collective
737bargaining agreements that apply to state workers. 39 of 39
738 (b)The department shall have the authority to enact regulations establishing the
739forms and manners under which sections 2 through 6 shall apply to state workers so that such
740application conforms with the previous paragraph.