Highly illegal in the EU. Also highly stupid everywhere else. The big question is “How secure is your user espionage system and can an outsider get acces?”. The data from something like this is a social engineering goldmine.
I mean, a lot of the places people say stuff like that our government-related jobs, where the emails and internal DMs are recorded as public record. This isn’t as much of an issue in that case.
Under the GDPR, employers in the EU can only monitor employees’ work emails if it is necessary, proportionate, and serves a legitimate purpose, such as ensuring compliance or security. Employees must be informed about the monitoring in advance, and clear policies should be in place to respect transparency and consent requirements. Any monitoring must also balance the employer’s business interests with the employees’ right to privacy, ensuring minimal intrusion. Some countries like Germany have really strict interpretations of how to apply the GDPR here.
Highly illegal in the EU. Also highly stupid everywhere else. The big question is “How secure is your user espionage system and can an outsider get acces?”. The data from something like this is a social engineering goldmine.
I mean, a lot of the places people say stuff like that our government-related jobs, where the emails and internal DMs are recorded as public record. This isn’t as much of an issue in that case.
Source? I’ve signed contracts before that includes clauses saying they can basically read my work email whenever they want.
Screen and web history sounds pretty illegal though, but would love to hear what law that is.
Under the GDPR, employers in the EU can only monitor employees’ work emails if it is necessary, proportionate, and serves a legitimate purpose, such as ensuring compliance or security. Employees must be informed about the monitoring in advance, and clear policies should be in place to respect transparency and consent requirements. Any monitoring must also balance the employer’s business interests with the employees’ right to privacy, ensuring minimal intrusion. Some countries like Germany have really strict interpretations of how to apply the GDPR here.