The Big Myth – Payroll is Confidential. Here’s How to Fix it.

Payroll information is arguably the most sensitive component handled by your company, but have you ever wondered how safe your information actually is? 

It is true that when data is processed within encrypted environments like ADP, Paychex or other payroll providers it’s secured, protected by a myriad of global and local privacy firewalls, as well as explicit statements and policies covering personal information and data collection. Using a  legitimate third party payroll company is a safe choice.  So, what’s there to worry about?

The Human Factor

The issue to consider is the human factor inside your company. I’m referring to people who have access to your personal information and your compensation details.  It’s true, we are all human and human error is inevitable.  Who hasn’t sent an accidental email meant for a colleague that was erroneously sent to their boss or, worse yet, to mass distribution?  Embarrassing, yes, but what if the accidental email you sent was a payroll report?  The thought alone is enough to send chills down your spine, but the good news is this type of error is preventable with solid policies.  For example, as a rule avoid emailing payroll reports, and let employees find them on your payroll processing company’s servers instead.

Unfortunately, sometimes information leaks through the very people who are supposed to keep it safe – employees who process payroll or have access to employee files (your social security number, compensation details and even family information). It’s not unheard of to have payroll  employees Google your home address and discuss where you live and the cost of the house you live in with others at your workplace. Information about bonuses and raises often becomes common knowledge, salaries of new hires and current managers sometimes turn into anecdotal benchmarks.

Larger companies with clear salary levels, seniority, and hierarchal structures aren’t subject to such mishaps as much as the smaller companies without matrixed org charts and subjectively defined salary ranges. However, the structure is not the only differentiator that contributes to this disparity. It’s lack of professionalism that can sometimes prevail in a small business environment.

Lack of Power

Employees in back-office positions often feel that they are not in power, they feel invisible. They are isolated from main business operations and client-facing interactions. They are not the praised heroes at sales meetings, they feel lack of power or lack of respect in their positions. They can sometimes feel that the only way for them to gain attention and popularity is to use their access to information – information is power.  They may be upset at the job, at the boss.  They do not want to cross the line and do something illegal, like embezzle funds, but they will do something seemingly not as damaging – share someone’s data.  What’s the big deal, really?

Sharing information seems like a harmless enough act. They’ll confidentially spill some interesting details at lunch with a work friend like “Guess how much this guy makes” or at bonus and raise time, “Guess how much their bonus was this year, yet I couldn’t even get a raise…”.  The effects of such leaks are incredibly damaging. Everyone loves gossip and hearing juicy details. Everyone. Remember, we are all human and curiosity is in our nature. It spreads like wildfire and quickly becomes the vortex of a rumor mill. This scenario is not something found in a book of fiction, it’s truly inherent in a lot of business environments.

What’s the root of the issue?

When you deal with senior people who have sat through hours and days of conduct training, they understand the meaning of the word “professional.”  It’s assumed and expected. Larger companies invest a lot of resources into training their employees and repeat the cycle on yearly basis. This produces a level of professionalism that is often lacking in small and medium sized businesses, especially in back-office operations. Individuals in these positions often built a career in smaller companies, which more often than not lack funding to properly train staff on issues related to compliance and policies.  These are considered “soft skills” and will take a back seat to the training of sales reps, for example.  In turn, support staff’s training comes from doing the job itself where they learn to create their own standards and rules of engagement.

How can you prevent this issue from impacting your company?

Make sure that your company has the appropriate policies in place. If you’re on a tight budget you can find standardized policy manuals through various sources online. Of course, it is always recommended that an employment attorney review your documentation and make suggestions specific to your business.  These will include policies on breach of confidentiality in handling personal and confidential information, and will also define grounds for termination. 

Training

Training is at the core of combating confidentiality issues. It’s dangerous to assume that your employees know how to handle information they have access to. Common sense means different things to different people, and if they haven’t been through training of your standards, you can’t assume what they know and how they will conduct themselves.  You can look for outside courses or create them internally.  Either way the focus should be on practical implementation. Present real-life scenarios, use role-playing, identify clear definitions of responsibilities and remind employees that mishandling of confidential information is a serious offense.  The nature of their position is power of information, and with great power comes great responsibility.

In addition, make sure you create an environment that encourages an open door policy.  Have conversations with your staff about their concerns, and be available to your employees so they can discuss grievances with you in private, not in a lunch room.  Remember, back-office employees are not just support people.  The information they handle every day has a great impact on your company’s performance and even profitability.  If not managed properly it can demotivate and ruin morale. Empower them to take pride in the role they play in your organization, acknowledge the impact of their positions and always remember to give them credit and respect.

Have you read?

• The 25 Best-Paying Jobs In The U.S. For 2017
• World’s Top 25 Countries For 2017: Switzerland, Canada, And UK Topped
• Decoding Millennials: How They Can Become A Players
• Four Signs that You Have a Growth Problem