"Under the law, employers cannot discipline employees or decline to hire job applicants because they do not give them access information, including user names, passwords, login information, or “other security information that protects access to a personal internet account,” according to the bill. Universities and schools cannot discipline or fail to admit students if they do not give similar information."
There is one exception, however:
"However, accounts owned by a company or educational institution, such as e-mail, can be requested.""
Link to Original Source