GDPR includes an exemption for companies logging information that is required to maintain the security of their infrastructure. This includes things like loggin

GDPR includes an exemption for companies logging information that is required to maintain the security of their infrastructure. This includes things like logging employee's DNS requests, AV logs, DHCP logs, web proxy, etc. Things that are fundamental to ensuring the security of the corporate network and the data it contains. That means even under GDPR, your employer could (and should) monitor what you're doing on their company-owned assets.