In some of the regulated organisations I’ve worked in, every single piece of email, web, or IM traffic has been scanned. At a minimum for DLP and malicious cont

In some of the regulated organisations I’ve worked in, every single piece of email, web, or IM traffic has been scanned. At a minimum for DLP and malicious content reasons, and usually by profanity/obscenity filters too. How could that possibly work with such a regulation? Every communication is read, at a minimum by a computer, and if you trigger an alert, it will usually be read by a human being as well. If such a regulation allowed for that to take place, then it would be a very weak privacy regulation. If it didn’t allow for that, then it would interfere with the basic compliance requirements of a lot of industries.