Not that easy in EU: "instead of monitoring individual usage, employers can monitor aggregate levels of usage and send general reminders to staff. If excessive

Not that easy in EU: "instead of monitoring individual usage, employers can monitor aggregate levels of usage and send general reminders to staff. If excessive private use persists, monitoring can be increased in line with the defined rules of the organisation, for example to specifically target particular suspicions" those rules should also be made public to the employees Additionally staff should be made aware and formally comment on any subjective interpretation of data for their evaluation. Also if using ML the also should be published and be explainable ML Also EY says monitoring only for "legitimate reasons" which is a legal murky area. https://edps.europa.eu/data-protection/data-protection/reference-library/private-use-electronic-communications-workplace_en https://edps.europa.eu/data-protection/data-protection/refer... https://edps.europa.eu/data-protection/data-protection/reference-library/evaluation-staff_en https://edps.europa.eu/data-protection/data-protection/refer...