Employers in the nations most populous state dont have the right to request social media usernames and passwords, with exceptions made for investigations of misconduct and employer-issued devices.