Workplace monitoring and the law

[irongeek at irongeek.com (Adrian Crenshaw)]

Out of curiosity, does anyone here work with workplace monitoring and the
law? It seems that under most cases, if a company owns a network, they can
monitor anything employees do on it, but are there exceptions? For example,
let's say the company has an "Incidental computer use policy" that allows
the employees do do some things on the network for personal reasons. An
employee checks out medical information, or perhaps buys something online
with a credit card. If the company's monitoring system logs this, and the
data, what is their liability for having this "Personally identifiable
information"? Are they allowed to see it?

Also, for public (government) employees, it seems that there are certain 4th
amendment protections, but I'm still researching these.

Adrian
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://mail.pauldotcom.com/pipermail/pauldotcom/attachments/20091015/53bab123/attachment.htm