I'm not sure that that's the responsibility of legislation. If you are misled (even unintentionally) as the the nature of the account you are sharing private information with, then the responsibility for having broken the trust lies with your friend. In this senario, you have willingly shared private information with the employer.

Now, wether there should be legal ramifications for such a violation of trust may be a worthwhile questions, but not one that this bill, which only amends an existing law, even even attempting to consider.