[lowbloodsugar]

IANAL: In California they cannot, unless it is related to the employer's business (so if the employer is Apple, Google or AWS, they probably can). In most states they can.