<?xml version="1.0"?>
<law><site_title>Virginia Decoded</site_title><site_url>https://vacode.org</site_url><law_id>54612</law_id><section_number>40.1-28.7:4</section_number><catch_line>Release of employee&amp;#8217;s personal identifying information</catch_line><edition url="https://vacode.org/2025/" slug="2025" current="TRUE" last_updated="">2025</edition><structure><unit label="title" level="1" order_by="1" identifier="40.1">Labor and Employment</unit><unit label="chapter" level="2" order_by="1" identifier="3">Protection of Employees</unit><unit label="article" level="3" order_by="1" identifier="1">General Provisions</unit></structure><text>
						<section id="A"><p><span class="prefix-number">A.</span> As used in this section, &#x201C;<span class="dictionary">personal identifying information</span>&#x201D; means any of the following items of information about a current or former <span class="dictionary">employee</span>: home telephone number, mobile telephone number, email address, shift times, or work schedule. <a id="paragraph-200565" class="section-permalink" href="https://vacode.org/40.1-28.7_4/#A"><i class="fa fa-link"/></a></p></section>
						<section id="B"><p><span class="prefix-number">B.</span> An <span class="dictionary">employer</span> shall not, unless an exemption described in subsection C applies, be required to release, communicate, or distribute to a third <span class="dictionary">party</span> any current or former <span class="dictionary">employee</span>&#x2019;s <span class="dictionary">personal identifying information</span>. <a id="paragraph-200566" class="section-permalink" href="https://vacode.org/40.1-28.7_4/#B"><i class="fa fa-link"/></a></p></section>
						<section id="C"><p><span class="prefix-number">C.</span> The provisions of subsection B shall not apply to a release, communication, or distribution of <span class="dictionary">personal identifying information</span> that is: <a id="paragraph-200567" class="section-permalink" href="https://vacode.org/40.1-28.7_4/#C"><i class="fa fa-link"/></a></p></section>
						<section id="C1" class="indent-1"><p><span class="prefix-number">1.</span> Required pursuant to any applicable provision of federal <span class="dictionary">law</span> that preempts the provisions of this section or of state <span class="dictionary">law</span> that requires an <span class="dictionary">employer</span> to release, communicate, or distribute <span class="dictionary">personal identifying information</span>; <a id="paragraph-200568" class="section-permalink" href="https://vacode.org/40.1-28.7_4/#C1"><i class="fa fa-link"/></a></p></section>
						<section id="C2" class="indent-1"><p><span class="prefix-number">2.</span> Ordered by a <span class="dictionary">court</span> of competent <span class="dictionary">jurisdiction</span>; <a id="paragraph-200569" class="section-permalink" href="https://vacode.org/40.1-28.7_4/#C2"><i class="fa fa-link"/></a></p></section>
						<section id="C3" class="indent-1"><p><span class="prefix-number">3.</span> Required pursuant to a warrant issued by a judicial officer; or <a id="paragraph-200570" class="section-permalink" href="https://vacode.org/40.1-28.7_4/#C3"><i class="fa fa-link"/></a></p></section>
						<section id="C4" class="indent-1"><p><span class="prefix-number">4.</span> Required by a <span class="dictionary">subpoena</span> issued in a pending civil or criminal case, or by <span class="dictionary">discovery</span> in a civil case. <a id="paragraph-200571" class="section-permalink" href="https://vacode.org/40.1-28.7_4/#C4"><i class="fa fa-link"/></a></p></section></text><history>2013, c. 495.</history><metadata></metadata></law>
