{"id":188,"date":"2015-03-12T23:01:55","date_gmt":"2015-03-12T23:01:55","guid":{"rendered":"http:\/\/kb2.host.dbj.systems\/?p=188"},"modified":"2015-03-12T23:01:55","modified_gmt":"2015-03-12T23:01:55","slug":"gdpr-things-to-know-about-your-work-email","status":"publish","type":"post","link":"https:\/\/dbj.systems\/kb\/2015\/03\/12\/gdpr-things-to-know-about-your-work-email\/","title":{"rendered":"GDPR: Things to Know About Your Work Email"},"content":{"rendered":"
\"Don't
Don’t Pull a “Hillary email stunt” on GDPR officer please.<\/figcaption><\/figure>\n

 Things to Know About Your Work Email<\/h1>\n

Handy micro guide to your e-mail rights and obligations<\/h2>\n

[Original source<\/a>] of this text.<\/p>\n

Digital privacy at the workplace is actually something everyone should at least be thinking about. And not just high-profile folks in the limelight of the media, but all of us. In fact, these issues arguably affect us the commuting work-a-day masses far more than the power brokers. If you<\/em> lose your job because of emails you sent, you’ll probably find yourself in a precarious situation.<\/p>\n

Let us begin this discussion by first acknowledging the following: As an employee, you have entered into an agreement to rent your brain and body to a company in return for a salary. Your HR department may attempt to sugarcoat this sad fact of adulthood with free coffee in the break room or the occasional “Tapas Tuesday,” but you are essentially just a (replaceable) tool your company uses to create a product or provide a service. It is therefore in your company’s interest to get as much out of their tools (i.e. you) as possible. And that often takes the form of monitoring of your digital behavior.<\/p>\n

Unfortunately, there aren’t a lot of universal hard-fact rules regarding privacy and employment. This is because there’s a messy patchwork of overlapping laws at the state, and local level, many of which were conceived and codified long before anyone was even aware of what an “e-mail” was.<\/p>\n

Therefore, few universal pronouncements can be made and the courts tend to rule on a case-by-case basis in a “very fact-specific” manner, according to a law professor, who helped us highlight six general principles about using digital communication in the workplace. Please keep in mind that aspects of this laws have been actively evolving both in US and EU. Until now that is, when we count last “days of freedom” before 25 may 2018 and the GDPR.<\/p>\n

1. Don’t say anything that could get you fired over company email.<\/strong>
\nAs a general rule, an employer can’t intentionally access digital communications when you have a reasonable expectation of privacy. But ask yourself if your privacy expectations match up with that of the law.<\/p>\n

One place you should probably expect to be monitored is when using company email. If you are using a company-issued computer to access company email stored on company-owned servers, you shouldn’t have an expectation of privacy. All those communications are basically your employer’s property.<\/p>\n

Courts also look to what your company’s email policy<\/strong> says in deciding whether you reasonably expected privacy for your emails. It matters, for example, if that policy clearly says that workers can’t use company computers for personal email activity, and that they will be monitored.<\/p>\n

If any of this is news to you, hopefully you haven’t been emailing anything that you wouldn’t want your boss to find out about.<\/p>\n

2. Personal email accounts on third-party servers are protected, even if you access them on a company-owned computer.<\/strong><\/p>\n

If you use your company’s computer to check your private, password-protected email (i.e. one that lives on a third-party server like Gmail), then it is probably<\/strong> protected. There’s a Electronic Communications Privacy Act \u2014that bans your employer (and others) from deliberately accessing that email without your permission.  But. There are many court cases in which employees accessed private email through a company computer and an employer wanted to monitor these activities. The court found that these emails were inadmissible as they were accessed without the employee’s authorization in violation of the Stored Communications Act.<\/p>\n

3. Employers can’t require that employees (or potential employees) give them access to their social media accounts.<\/strong><\/p>\n

As much as you might want to know if your current or potential employees are getting up to any shenanigans in their spare time, you\u2014in a growing number of jurisdictions \u2014won’t be able to request or require them to give you access to their social media accounts so you can find out. In fact, many countries are working on laws specifically making this practice illegal  (surely based on no small part from lobbying and legal efforts of Facebook <\/a>itself).<\/p>\n

4. You can be fired because of what you post on social media.<\/strong><\/p>\n

As with email, an employer can’t use your work computer to directly access your social media accounts without your approval. But just because an employer can’t access your Facebook or Instagram accounts, it doesn’t mean they can’t use your social media to judge\u2014and possibly even fire or discipline\u2014you.<\/p>\n

If your social media is password protected and the employer gains access without your authorization, that’s against the law. However, if there’s no privacy setting and you make your postings available to the world, it’s going to be harder for you to argue privacy.<\/div>\n

Facing consequences at work for social media posts you put up in your spare time is something that we see happen all the time<\/a>.<\/p>\n

5. BYOD (Bring Your Own Device) is a big confusing mess.<\/strong><\/p>\n

Many people use their own personal phone and tablet at work and will use these devices to access company email as well as other company documents. This is known as a “Bring Your Own Device” (or BYOD<\/a>) setup. And when it comes to monitoring, unfortunately there’s not a lot we can do to guide you.<\/p>\n

So, how far can your employer go to monitor your activity on a device that you purchased and use for your own personal communications? It’s TBD.<\/p>\n

If your employer is intercepting or accessing your communications on your personal electronic device and you haven’t given them authorization to do so, then there is a risk that activity is going to violate the law.<\/p>\n

6. Civil servants have protections that private employees do not.<\/strong><\/p>\n

Since their employer happens to be the government, public employees are protected from intrusion in many cases where private employees are not. Specifically, public employees would have the protection, which “protects a person from ‘unreasonable searches’ of their ‘persons, houses, papers, and effects,’ and also limits public employers to only ‘reasonable searches’ of the digital communications of their employees.<\/p>\n

Of course, what counts as “reasonable” varies a lot by the kind of civil servants work setting. But for those of us employed in the private sector this  just doesn’t apply.<\/p>\n

[Source<\/a>] of this text.<\/p>\n","protected":false},"excerpt":{"rendered":"

Here’s a handy guide to your digital rights so you won’t mess up your career plans.<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"_jetpack_newsletter_access":"","_jetpack_dont_email_post_to_subs":false,"_jetpack_newsletter_tier_id":0,"_jetpack_memberships_contains_paywalled_content":false,"_jetpack_feature_clip_id":0,"_jetpack_memberships_contains_paid_content":false,"footnotes":"","jetpack_post_was_ever_published":false},"categories":[3,4,6],"tags":[30],"post_folder":[],"class_list":["post-188","post","type-post","status-publish","format-standard","category-compliance","category-it","category-news","tag-email","czr-hentry"],"jetpack-related-posts":[],"jetpack_sharing_enabled":true,"jetpack_featured_media_url":"","_links":{"self":[{"href":"https:\/\/dbj.systems\/kb\/wp-json\/wp\/v2\/posts\/188","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/dbj.systems\/kb\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/dbj.systems\/kb\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/dbj.systems\/kb\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/dbj.systems\/kb\/wp-json\/wp\/v2\/comments?post=188"}],"version-history":[{"count":0,"href":"https:\/\/dbj.systems\/kb\/wp-json\/wp\/v2\/posts\/188\/revisions"}],"wp:attachment":[{"href":"https:\/\/dbj.systems\/kb\/wp-json\/wp\/v2\/media?parent=188"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/dbj.systems\/kb\/wp-json\/wp\/v2\/categories?post=188"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/dbj.systems\/kb\/wp-json\/wp\/v2\/tags?post=188"},{"taxonomy":"post_folder","embeddable":true,"href":"https:\/\/dbj.systems\/kb\/wp-json\/wp\/v2\/post_folder?post=188"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}