Personal Online Account Privacy Protection Act

Bars employers and schools from requiring employees, applicants, students, or prospective students to hand over usernames, passwords, or other login credentials for their personal online accounts, and from punishing them for refusing. Employers may still require credentials for employer-provided devices and business accounts and may investigate specific reports of misconduct or data leakage. The law creates no duty to monitor personal accounts.