±Forensic Focus Partners

Become an advertising partner

±Your Account


Username
Password

Forgotten password/username?

Site Members:

New Today: 3 Overall: 36632
New Yesterday: 7 Visitors: 158

±Follow Forensic Focus

Forensic Focus Facebook PageForensic Focus on TwitterForensic Focus LinkedIn GroupForensic Focus YouTube Channel

RSS feeds: News Forums Articles

±Latest Articles

±Latest Videos

±Latest Jobs

Invasion of privacy in work enviornment?

Discussion of legislation relating to computer forensics.
Reply to topicReply to topic Printer Friendly Page
Forum FAQSearchView unanswered posts
 
  

Audio
Senior Member
 

Invasion of privacy in work enviornment?

Post Posted: Feb 05, 08 23:51

Can there be an invasion of privacy in a business environment in this example? Say you have login banners, a signed security policy, and a security awareness program that let the employees know that they shouldn't expect privacy on computers while at work. You suspect an employee has breached your security policy in some way, could you surreptitiously install Spector Pro which can capture screen shots, IM chat activity, keystrokes, online searches, web site activity, email activity, program activity, etc and use that evidence in court if need be? What if you install Spector Pro on computers without probable cause?

Basically, if you have login banners, etc, is there a limit to the things you can monitor without breaking federal laws by wiretapping, possessing passwords, and similar things?

Edit: This is according to US law...  
 
  

AWTLPI
Senior Member
 

Re: Invasion of privacy in work enviornment?

Post Posted: Feb 06, 08 00:22

Typically, there is "no expectation of privacy." But... California has enacted rules that give workers a bit more privacy on the job. Also, government workers have more privacy rights than civilians on the job.

The reasoning for civilian businesses is that the computers, the data, the bandwidth, etc. belong to the employer. The employer sets the rules for what can and cannot be done with their property. Where business often fall down is when they fail to enforce their policies CONSISTENTLY. There have been numerous lawsuits charging unfair enforcement. "Joe Slacker" may not like it when he's terminated for-cause. The employer needs to be prepared to defend why they singled "Joe" out for special "attention," if their policies do not include a proviso for regular monitoring of all employees or a clearly stated policy of random monitoring.

All things being equal, it sounds like the employer in your scenario is free to monitor BUT please seek the advice of an attorney who specializes in workplace issues.

-Austin
_________________
MSc, CISSP 
 
  

Audio
Senior Member
 

Re: Invasion of privacy in work enviornment?

Post Posted: Feb 07, 08 03:26

Thanks for your insight!  
 
  

jemartin
Member
 

Re: Invasion of privacy in work enviornment?

Post Posted: Feb 07, 08 19:16

Be certain to check for civil contractual issues on employee monitoring as well.

I had recent experience in a California corporate environment - one of the "gotchas" to deploying a monitoring solution like Spector was a union contract *requiring* notification to the union of any monitoring of a union member. This came up originally with CCTV monitoring in high theft risk areas, but certainly appled to keylogging as well.

-Jim  
 
  

Audio
Senior Member
 

Re: Invasion of privacy in work enviornment?

Post Posted: Feb 08, 08 20:59

I'm glad you mentioned that jemartin, because I wouldn't of though of that. I guess the lesson I'm learning is to let the legal department decide so you can CYA in case things go wrong...  
 

Page 1 of 1