Personal identifying information. Employers, with some exceptions, may not be required to release, communicate, or distribute any current or former employees’ personal identifying information to third parties (Va. Code § 40.1-28.7:4). “Personal identifying information” includes home and mobile telephone numbers, e-mail addresses, shift times, or work schedules. However, the law does not apply to releases, communications, or distributions of personal identifying information that are:
• Required by federal law that preempts the state law or under a state law that requires an employer to release, communicate, or distribute personal identifying information;
• Ordered by a court;
• Required pursuant to a warrant; or
• Required by a subpoena or by discovery in a civil case.
Social Security numbers (SSNs). Virginia law restricts the use of Social Security numbers (SSNs). Specifically, any person or employer in Virginia is prohibited from:
• Intentionally communicating an individual's SSN to the general public;
• Printing an individual's SSN on any card required to access or receive products or services;
• Requiring the use of a SSN to access an Internet website unless a password or other security device is used; or
• Mailing a package with the ...