User Privacy on Corporate Systems 1

[gb0mb]

Hello all,

I was looking to get some information on user expectations of privacy on corporate systems.

Currently corporate policy is that it does not exist and everything you put on their systems they can view and do with what they want.

They do not have a published network use policy nor do they have that standard click ok to accept monitoring policy banner upon login.

Their opinion is they do not even need to provide this and that the law is on their side.

I am not sure if they are right nor wrong and am looking to educate myself via this forum and some googling. Fortunately it has been stated that even though this is the law we should honor ethical standards on peoples privacy.

I just what to know more about the legal side of it, so if we are in the wrong I can at least cya myself by bringing it to upper managements attention.

If a better group exist for this please let me know so I can post accordingly.

Thanks ahead of time.


Gb0mb

........99.9% User Error........

 

[eyec]

no matter what user policies are, State laws will trump corporate policies, recent court cases have swung both ways; for and against the corporate policies.

i am not a lawyer but, i did sleep at one of those express motels.

get together with your legal department and have them intimately involved with this issue to cya!

 

[tfg13]

Excellent observation eyec!

Most of us won't be lawyers, but have had enough experience "dealing" with stuff like this. I would go the route of your legal department, as well as having HR involved. Reason being, both will have the best interest for employees and legal issues.

Having something like this:

http://www.sans.org/resources/polic...y.pdf?portal=87cd4585db7011152064f3deccfd89f1

could be very useful in determining what can happen. I would show this to management, the legal department, and human resources, just so they have an idea of what sort of things can happen (especially the bad stuff).

 

[lhuegele]

What you need to do is seek the advice of a lawyer who is familiar with this type of HR / IT issue.