I very much agree with all of these points, which is why, as I told my HR rep, I won't use any personal websites on the work network at all since the HTTPS inte

I very much agree with all of these points, which is why, as I told my HR rep, I won't use any personal websites on the work network at all since the HTTPS interception was turned on. It's been a gigantic pain in the ass doing things like checking my bank statements or whatever on my phone only, but I live with it. The only non strictly work related site I go to is this one, with this throwaway account/random password. On the topic of liability and owning up to a potential hack, I think my company would be transparent about it, based on a history of being transparent about many atypical things in the past. We're not public, never received any VC funding, and nobody has any equity stake in the company except for the owner, who himself goes over the entire company's income statement in front of all the employees once per year to let us know where all the money's coming from/going to. I do believe he would do whatever he could to make it right, because the buck stops with him and him alone. Clearly that's only a small comfort if our personal information is leaked, but I don't think in my case it would be covered up. I could certainly see that being the case in most corporate structures, though.