You keep saying there is no reasonable expectation of privacy, but there is no basis in law for that position, at least not in the EU or UK. I've edited my ear

You keep saying there is no reasonable expectation of privacy, but there is no basis in law for that position, at least not in the EU or UK. I've edited my earlier comments to add some sources, including a reference to the official guidance from the UK's national data protection authority that directly states that just because someone is at work it does not mean they have no expectation of privacy. You can also find lots of public commentary from employment lawyers on the Web where they have interpreted the GDPR similarly, similar statements from other national regulators, etc. Some of these highlight tricky situations like the need to respect personal email as well.