New Privacy Provisions of Senate Bill 1196 Do Not Extend to Members of Cooperatives

It appears that, effective July 1, 2010, members and employees of condominium associations and mandatory homeowners' associations in Florida will be entitled to some additional privacy protections thanks to Senate Bill 1196

The Florida legislature, through Senate Bill 1196, has revised Florida Statute Sections 718.111(12) and 720.303(5) to provide that the following records--in addition to those already protected--shall not be accessible to condominium unit owners or subdivision parcel owners:

  • Personnel records of association employees, including, but not limited to, disciplinary, payroll, health, and insurance records
  • Social security numbers, driver's license numbers, credit card numbers, electronic mailing addresses, telephone numbers, emergency contact information, any addresses of a unit or parcel owner other than as provided to fulfill the association's notice requirements, and other personal identifying information of any person, excluding the person's name, unit or parcel designation, mailing address, and property address
  • Any electronic security measure that is used by the association to safeguard data, including passwords
  • The software and operating system used by the association which allows manipulation of data, even if the unit or parcel owner owns a copy of the same software used by the association.

However, for some reason, Florida Statute Section 719.104(2), which governs the official records of a cooperative association, was not amended by Senate Bill 1196.  

Members and employees of cooperatives thus will now have less privacy protection than their counterparts in condominiums and subdivisions.

I assume that this was not intended by Florida's legislators and that a "glitch bill" will be introduced at the next session in Tallahassee to ensure members and employees in all categories of resident owned communities are given equal privacy protection. 

In the meantime, members of cooperatives might want to bring this to the attention of their state legislators.

ROC Members Have Rights to Employees' Salary Information

Can unit owners in resident-owned communities discover what the association is paying its employees, including the manager

We are asked this question frequently each year, especially when the association is in the process of preparing its annual budget.   Obviously, the association's employees would prefer that information about the compensation they are receiving be kept private and confidential and many board members and managers are uncomfortable disclosing this information to residents in the community.  Directors are concerned--quite often, with justification--that the residents in the community do not understand that a salary paid to a ROC employee in Ohio twenty years ago would not be a competitive salary in a community in Florida in 2009.

However, Florida's statutes governing condominium associations, cooperative associations, and mandatory homeowners associations make it clear that information about the compensation paid to an employee and the other benefits that an employee receives falls within the "official records" of the association.   Any association member is entitled to inspect and copy this information.

I have a few suggestions to help board members and managers maintain some amount of privacy for the association's employees without violating Florida statutes:

  1. Florida's statutes require that an association member's request to inspect or copy official members be made in writing and that the association has a number of days to respond to that request.  This allows a manager confronted at the office by a unit owner demanding salary information to request that the unit owner submit his request in writing prior to allowing that unit owner access to that information.
  2. The requirement that requests to inspect official records be submitted in writing allows the President or Chairperson to advise any member insisting upon disclosure of an employee's salary during a meeting of the board or membership that any unit owner  wishing to obtain this information is free to do so by submitting a written request as provided for by Florida's statutes.
  3. It's also very helpful if the association's board of directors can assure its members that its employees' wages, salaries, and benefits are in line with those paid to employees in comparable communities in the area.  The board or manager can often obtain this information from its accountant or through networking with neighboring communities.   Local chapters of the Community Associations Institute and regional groups such as Mid-Florida ROC or SWFLROC  would provide an association's board members the opportunity to gather this information on an informal basis.

Finally, any member that does inspect or copy information about an employee's compensation and benefits should be gently but firmly reminded that any employee of the association deserves the courtesy of not having his or her salary broadcast throughout the community indiscriminately.   No unit owner would enjoy having his financial information freely discussed at the pool or in the clubhouse and any member that obtains an employee's salary information channels should respect that employee's privacy. 

In addition, ROC members living in communities where not all of the residents are members of the association (such as resident owned mobile home cooperatives where some home owners are not members of the cooperative) should keep in mind that a unit owner who divulges an employee's salary may in fact be providing that information to non-member homeowners who are not entitled to that information and who may try to use that information to damage the  association--for example, by challenging an increase in the annual rent to be paid by the non-member mobile home owners and citing the salary information that was intentionally or unintentionally disclosed to that non-member.

Clearly, every member of the association owes both the association's employees and all of the other residents in the community a high degree of discretion when that member obtains information about the compensation and benefits paid to association employees.

 

Implementation of "Red Flag" Identity Protection Rules Delayed Until June 1, 2010

Those of you that attended our recent ROC seminars at the Molokai community in Leesburg and Sandalwood Park in Venice know that the Federal Trade Commission has delayed the implementation of the "Red Flag" Identity Protection Rules until June 1, 2010.  I briefly summarized my understanding of these rules and how they may impact resident owned communities at those two seminars and will present the same summary at our upcoming seminars at Old Bridge Village in Fort Myers and Westwinds Village in Bradenton.

The Community Associations Institute recently published an article that may help ROC managers and board members determine whether their association will have to comply with the "Red Flag" rules and, if so, the type of identity protection program the association will have to adopt and maintain.

A number of factors will have to be considered, including:

  • Whether the association is a "creditor" because it accepts installment payments of maintenance fees or assessments (while this does not seem to include rent payments, a cooperative association that finances residents' purchases of membership shares would appear to be a "creditor")
  • Whether there is a risk of identity theft as measured by factors, including the volume of identity-related information that is received by the association and the number of association employees and board members that review that information

The CAI's article provides an outline of a basic identity protection program that associations might want to consider.   The association should consult with its attorney to help prepare and implement the community's identity protection plan.

A great deal of uncertainty still surrounds the "Red Flag" rules and I would not be surprised if the FTC decides to delay the implementation of these rules again as the June 1 deadline approaches.  However, managers and board members should strive to protect the privacy of every resident in their communities.  Please remember that the association's attorney should be consulted whenever a question involving a request to provide a resident's "private" information arises as the provisions of the Florida Statutes governing condominium associations, cooperative associations, and homeowners' associations may require the production of information that a resident, board member, or manager considers to be "private".

"Pet Lists" Do Not Violate Federal Privacy Rules

One of our ROC managers recently contacted me about a resident who claimed that the community was violating the Health Insurance Portability and Accountability Act of 1996 (often referred to as the "HIPAA laws").   While the community's rules and regulations did not allow pets, several exceptions to the "no pet" rules had been granted.   The manager and the board had compiled a list of the names and addresses of each person permitted to have a pet in his or her home and the complaining resident was certain that by creating  this list the community had violated HIPAA.

The HIPAA laws create a "privacy rule" that prohibits certain "protected health information" from being disclosed.  This "privacy rule" applies to the following persons and businesses that have been defined by the U.S. Department of Health and Human Services as "covered entities":

  • Individual and group health plans that provide or pay the cost of medical care
  • Every health care provider, regardless of size, who electronically transmits health information in connection with claims, benefit eligibility inquiries, referral authorization requests, or certain other transactions
  • Health care clearinghouses such as billing services, repricing companies, and community health management information systems

ROCs would seem to fall well outside of any of the categories of these "covered entities" and as such would not be bound by the HIPAA privacy rules.

In addition, as I advised the community's manager, the mere fact that a resident is allowed to have a pet doesn't necessarily mean that the pet is in the home for medical or health reasons.   I thus did not see how the existence of this list violated HIPAA's privacy rules.

However, I did remind the manager that if a member requested a list of all residents in the community that had pets and the association had in fact compiled such a list, the association would have to produce that list as required by Florida's statutes governing condominiums, cooperatives, or homeowners associations.  

If a community does have a list of homes with pets--especially if the community is a "no pet" or a pet restricted community--I suggest that the list remain with the manager and that it not be distributed to the board or other members in the community.   This will take pressure off of the board and eliminate the danger that a board member may be accused of violating a resident's privacy rights.  Even if that accusation proves to be unfounded, it's an added aggravation and may result in expenses to the association that could have been avoided.

Does Florida's "Sunshine Law" apply to ROCs?

One of my blog readers recently emailed me and wanted to know whether Florida's "Sunshine Law" applies to meetings between less than a quorum of the members of the board of directors of an ROC.

Many members of resident owned communities incorrectly believe that the meetings of their ROC board or ROC committees are governed by Florida's "Sunshine Law," which can be found in Chapter 286 of the Florida Statutes.   It's clear from the provisions of this chapter, and in particular Section 286.011, that Florida's "Sunshine Law" only applies to meetings of boards or committees of state, county, or municipal agencies or other similar political subdivisions and not private enterprises.  In other words, only a very few ROCs (those that are agencies of state or local government--such as a community development district) are subject to Florida's "Sunshine Law".

Thus, in most situations, I see nothing wrong with a ROC President or other board member meeting with other board members as long as less than a quorum of the board is present during that meeting, even if the purpose of that meeting is to determine how the board members at that meeting are going to vote on a matter coming before the board in the future.   An effective President or board chairperson should already have a pretty good idea of how his or her board is going to vote on important matters before the board meeting and it's certainly logical that he or she contact the other board members in advance to find out how each member intends to vote and the reasons for that member's vote.

As long as there is less than a quorum of board members in the room where the meeting is occurring, even if ROC business is being discussed, there is no violation of the applicable provisions of Florida Statutes Chapters 718, 719, or 720.  I do want to remind ROC managers and board members that an illegal meeting occurs when a quorum of the board finds itself on the same conference call, receiving an email sent to them simultaneously, or in a "chat room" or other internet "meeting" area if that meeting was not properly noticed and made open to all members and does not fall within the limited exceptions that allow "closed" meetings.   The State's Department of Business and Professional Regulation will not take kindly to any such illegal meeting--even if it was held in "cyberspace".

Do ROCs have to provide members' "summer addresses"?

I recently received an email from a board member of one of the resident owned communities we represent.   One of the members of this ROC had requested a list of all of the "summer addresses" of the residents in the community.   The board member wanted to know whether the ROC had to provide the member with those addresses and whether it was appropriate to mail that member a list containing those addresses.

  • Florida Statutes Section 718.111(12)(a)7, which applies to condominium associations, and Section 719.104(2)(a)5, which applies to cooperative associations, are identical and provide that  the association shall maintain "a current roster of all unit owners and their mailing addresses, unit identifications, voting certifications, and, if known, telephone numbers".   The statutes provide that this roster is part of the association's "official records".    The applicable provision of Chapter 720 governing mandatory homeowners associations almost mirrors its Chapter 718 and 719 counterparts.   
  • Based on language of these statutes, and the "catch all" provisions in Sections 718.111, 719.104, and 720.303 (4), which include almost every other written record in the association's possession that is in any way connected with the operation of the community, once a member gives the association his or her "summer. address,"  that address becomes part of the association's official records and any other member can request to inspect and copy that address.
  • The association is not required to mail the roster to requesting member.  The association's obligation in response to an appropriate record inspection request is simply to allow the member to inspect and copy those records.  However, I see no problem with the association mailing the roster to a member as long as any other member requesting the roster is notified of this option.  In other words, all members requesting the roster should be treated equally.   Obviously, if the roster is consistently kept current, the association can minimize time and inconvenience to its office staff by simply mailing the roster to the member and the member can be charged a reasonable cost for copying the list.

ROC members should understand that whatever addresses and telephone numbers they give to the association will have to be produced to another member that properly requests them.   ROC managers and board members should immediately contact the attorney representing their community upon receiving a request to inspect or copy records.