My point is that the misinterpretation is catastrophically riskier for the employer than the employee. This is as it should be, but isn't something the author of this article (or many commenters here) seem to recognize. Some commenters even hint at a belief that employers can directly access employee accounts on third party services, which is not an action accommodated by Illinois law.