These days it is super common. It used to be the domain of only fairly large organizations, but now even smallish to medium sized companies have easily availab

These days it is super common. It used to be the domain of only fairly large organizations, but now even smallish to medium sized companies have easily available options to do it. If you have an IT department (or person) who pushes updates or otherwise controls (or can control) software configuration on your machine, there is at least a decent chance they are also doing at least some of: - logging all traffic on company network (+ VPNs, of course) - MITM all SSL traffic on this network (and do filtered logging based on deep packet inspection and/or endpoints) - above including personal devices connected to that network - logging all software configuration changes on your machine - logging all network requests on your machine (regardless of network) - logging all crash logs and/or other OS level interactions - timetracking app usage - logging all communication layer traffic (i.e. mic usage, camera usage, endpoints) less likely: keylogging or other direct monitoring. In my limited experience all of this stuff is too logistically complex for small companies, but as soon as you start centralizing IT servicing at all, you will be offered products with some of these capabilities along with more standard virus scan etc.