Assume nothing’s private

Heather Egan Sussman, head of the global Cyber, Privacy & Data Innovation Group at law firm Orrick, says, “Employees should assume that whenever they’re using work owned and issued equipment, anything that they may do – including written communications or websites they may visit – is subject to review.

“Naturally, businesses monitor internal communications for legitimate reasons.

According to Sussman, as part of their compliance programs, businesses in highly regulated industries like financial services must actively monitor communications.