I had an internship at a company where all email was scanned, labeled, and encrypted based on the type of content in the email. Access to email was restricted w

I had an internship at a company where all email was scanned, labeled, and encrypted based on the type of content in the email. Access to email was restricted when not using the corporate network. The information policy was strictly enforced; no personal emails on the network, except when work is affected (ex: "my relative is getting married, so I'll miss the meeting"). The net effect of the company's measures would have protected employees from the situation Sony Pictures employees find themselves in; unfortunately most companies are not so stringent, so they are vulnerable like Sony Pictures. I think that, yes, people should not expect privacy on a corporate network, and yes, people should distinguish corporate from private email. However, the employee's attitude is impacted by the corporate attitude, and many companies are not nearly as strict as they should be with information policy.