Employees don't just use the Internet to get sports scores and play games anymore. Their medical records and financial information are readily available online, and while employees may use the Internet at work to confirm their cholesterol test results or verify that their direct deposits went through, others might use it for more nefarious purposes.
But even if workers' online use is completely innocent, employers need to guard themselves against claims of invasion of privacy and discrimination, according to experts.
Every company needs an acceptable use policy that clearly alerts employees that their electronic communications and activity are not private, legal experts agree. As Phillip Matlin, a partner at Los Angeles-based law firm Gordon & Rees, emailed me: "The business may monitor everything the worker does on the business's computer as long as the employer publishes and circulates a clear policy alerting employees that computer and Internet use are not private."
This policy protects the employer if an employee's Internet use is not so innocent, such as if an employee is accessing someone else's personal financial information, he added. In fact, employees should consider everything owned by corporate, says Elliot Lasson, adjunct professor of Employment Law at the University of Baltimore. "Generally speaking, anything that an employee does while on-the-clock on a company work station is property of the company."
However, not all employees know this or expect it, which is why companies must have an acceptable use policy and get employees to sign it.
Employers need to be as explicit as possible regarding the use of company equipment, Charles Krugel, a management-side labor and employment attorney based in Chicago, told me. They also need to specify that if employees still use the company's resources for personal use, there is no guarantee of privacy, and they do so at their own risk, he notes.
Resources also include company-owned WiFi networks, which Krugel says create their own issues when employees connect their personal devices: "You end up with the issue of whether or not it's a secured network." Within their policies, employers need to state that the network may not be secure for personal purposes.
Then employers need to enforce these policies consistently to avoid problems, says Krugel. "If you're an employer who is worried about protecting yourself from legal liability or exposure, consistency will be key, especially when it comes to electronic communication."
That consistency will help companies in the courtroom if an employee ever brings a privacy invasion or discrimination lawsuit.
Still, even if companies have ironclad policies in place, there are always employees who will disregard them. In addition to disciplining employees, Alix Rubin, an employment lawyer based in West Caldwell, N.J., advises companies to stop tracking data immediately once they notice an employee is accessing sensitive personal or financial information from a company-owned computer.
“In addition, the person conducting the monitoring should not be the employee's supervisor or anyone in the employee's chain of command who has the authority to alter the employee's terms and conditions of employment,” Rubin cautions. This helps companies avoid discrimination lawsuits.
In the end, a comprehensive written policy will help protect companies -- but make sure your attorneys have vetted the document before you turn it over to employees.
How comprehensive is your Internet use policy? Have you had problems with employees accessing sensitive data on company time?
— Christine Parizo is a freelance writer specializing in business and technology.
I'm not an attorney either but as far as I've seen the law seems to be written to assume that the employer owns the device the employee uses. With BYOD, obviously that's different.
You're right to an extent. The policies are primarily to protect the employer because government enforcement agencies like the Equal Employment Opportunity Commission, the National Labor Relations Board & the Department of Labor demand that employers put such policies in writing (even if employers aren't legally required to do so). In those agencies' minds, if it's not in writing, then it doesn't exist.
I agree, Mitch. The policy approach seems clear and simple, but confusion exists not only between devices (does a personal device become a work device when it's used for work?) but between accounts. Policies need to get into nitty gritty detail...
That is, if they're needed at all. I'm not an attorney, but I should have thought the law governs what employers can and can't review and respond to; a policy isn't going to change that, is it?
This isn't legal advice but, as a general rule, employers shouldn't read employees' personal emails. However, if an employee is using an employer-monitored, it's very likely that the employer will end up reading those personal emails.
Employers shoud have a clear & easy to understand policy that if employees use company owned or operated IT, then employees should have no expectation of privacy. Moreover, if the employer learns that an employee MIGHT be using company owned/operated resources for criminal activities, those activities will be IMMEDIATELY reported to the proper authorities. Should an employer ignore possible criminal activity, it risks exposure & liability for negligence or even criminal charges; when in doubt, act right away.
Scheduled backups could make life a lot easier for employees who practice BYOD. The data cleansing activity will still be debatable if some data is still resident on the phone. Unless, everything goes to the cloud or to corporate servers the companies will not be satisfied and will resort to remote wiping.
BYOD solves a lot more problems than it gives rise to and as such, in my opinion should be encouraged. Employers, from what I've seen are more threatened from issues arising from the use of BYOD than the employees. whatever policy is determined, employees need to be taken into confidence before enforcing it otherwise there's risk of employees flouting it.
Sandboxing has potential to solve some BYOD problems. Employers would run their apps and store data in a sandbox on the BYOD device. Or vice-versa -- employees could run their own apps and store personal information on the employer's device.
The ThinkerNet does not reflect the views of TechWeb. The ThinkerNet is an informal means of communication to members and visitors of the Internet Evolution site. Individual authors are chosen by Internet Evolution to blog. Neither Internet Evolution nor TechWeb assume responsibility for comments, claims, or opinions made by authors and ThinkerNet bloggers. They are no substitute for your own research and should not be relied upon for trading or any other purpose.
Last week's official US release of the BlackBerry Z10, the BlackBerry 10 touchscreen device, on the AT&T network marked the official entry of BlackBerry as a player in the formidable US smartphone market. While most consumers may not be swayed from their shiny, sleek iPhones and Android devices, businesses may still have a compelling reason to deploy BlackBerry 10. However, BlackBerry needs to do a few things before businesses will jump on the bandwagon, including opening up their management API and luring consumers to their device.
Whenever I whip out my BlackBerry Bold in public, someone will undoubtedly say, "Oh, how cute. You still use a BlackBerry." Yes, I do, and I'll use it until the day I die.
As legacy applications outlive their usefulness, companies look toward the cloud for maximum efficiency and minimum expense. But nothing is as simple or easy as just “moving to the cloud.” Legacy applications need to be modernized, and data has to be migrated. It’s the kind of headache that makes any seasoned IT pro reach for the coffee maker -- and a fistful of Advil.
Social integration, mobility, and the cloud -- with a side dish of social media -- are becoming evermore critical elements of enterprise content management (ECM).
More companies are trolling social networks to find and vet potential job candidates. Beware the pitfalls of blurring the line between personal and professional lives.
New York's Metropolitan Transit Authority is conducting a pilot test of digital kiosks to guide subway users to where they want to go more efficiently and at lower cost.
The Murdoch/News International scandal has all the elements of the digital age, from phone-hacking through embarrassing emails to agile digital reporting.
The plan for unmanned police drones to patrol traffic and other city conditions in Seattle has sparked a new set of legal concerns about privacy. Law traditionally lags technology, but we can expect now to see a new round of activity in the courts as legal definitions begin to emerge on what "next-gen privacy" will look like.
The quest for Webpage clicks and ad impressions is creating a market for sensational truths and lies in equal measure. How are we going to get to the bottom of any real issue online – like what's really going on with Carrier IQ, for example – if we can't separate hype from reality?
Cheaper, consumer-grade mobile devices are allowing SMBs to capitalize on Internet mobile communications and are replacing more ruggedized devices in industrial applications for companies of all sizes. Cost is one factor. Comfort is another.
New York's Metropolitan Transit Authority is conducting a pilot test of digital kiosks to guide subway users to where they want to go more efficiently and at lower cost.
The whole Amazon.reader debate is a double-stupid. It's stupid to think that there's any e-book buyer who doesn't know Amazon's URL, and it was stupider to let ICANN launch the whole free-form TLD initiative to start with.
While NFC's original goal was to enhance mobile commerce applications, it is finding its way into a number of other uses, which is creating both opportunity as well as challenges for IT departments.
Enterprises would like to move to cloud computing but are hesitant because they are concerned about providers’ ability to secure company data. Here are some tips that help to ensure that if breaches occur, the business is not left holding the bag.
Edmunds separates customers into segments based on the info it collects on its site and from partners, and uses that to push out custom content, said Brian Baron, director of business analytics for Edmunds.com, at Predictive Analytics Innovation Summit.
The automotive website uses propensity modeling to target ads and customer registration forms, said Brian Baron, director of business analytics for Edmunds.com, at Predictive Analytics Innovation Summit.
Expert Integrated Systems: Changing the Experience & Economics of IT In this e-book, we take an in-depth look at these expert integrated systems -- what they are, how they work, and how they have the potential to help CIOs achieve dramatic savings while restoring IT's role as business innovator. READ THIS eBOOK
your weekly update of news, analysis, and
opinion from Internet Evolution - FREE! REGISTER HERE
Wanted! Site Moderators Internet Evolution is looking for a handful of readers to help moderate the message boards on our site – as well as engaging in high-IQ conversation with the industry mavens on our thinkerNet blogosphere. The job comes with various perks, bags of kudos, and GIANT bragging rights. Interested?
To save this item to your list of favorite Internet Evolution content so you can find it later in your Profile page, click the "Save It" button next to the item.
Email This
