Monitoring Employee Communications
By Alan Gahtan - - January 1997
Most organizations with internal e-mail systems have installed gateways to allow the exchange of e-mail between users on their internal network and other entities on the Internet. Many are also at various stages of implementing secure firewalls to be used for providing desktop Internet access to their employees. Both these developments provide opportunities for employees to add new value to their employers business.
However, some employers are concerned that these facilities may also be used for inappropriate or non-business purposes and are uncertain of their legal rights to monitor employee usage of such facilities. In some cases, employers' fears of inappropriate use are justified. There have been instances of employees sending confidential information or corporate trade secrets through an employer's e-mail systems and employees using an employer's Internet facilities to start or operate their own businesses (in at least one case, an illegal business).
Employers may also find that they could be held liable for e-mail or Internet-related activities of their employees. In most cases, employee e-mail or Usenet postings carry the employer's name or trade mark as part of the employee's e-mail address. Defamatory, political or religious statements sent outside the company by employees may therefore be attributed to the employer.
Employers also have an obligation to provide a work environment free of discrimination and harassment. Inappropriate material circulated internally can create a problem. A subsidiary of Chevron Corporation settled a sexual harassment lawsuit for $2.2 million after a list called "Why Beer is Better Than Women" was circulated through its E-mail system.
Another concern is the potential liability for sexually explicit messages sent to other employees. Such e-mail messages can be used to support a harassment or discrimination case.
Pornographic images downloaded by employees is another big problem. In December 1996, a physicist working for Canada's Department of National Defence was arrested and charged with possessing and distributing child pornography. If pornographic images are downloaded and displayed on an employee's monitor then that can also contribute to a finding that the employer had allowed the creation of a hostile work environment for other employees.
Finally, much of the content accessible on the Internet is protectable by copyright or other property rights and needs to be used appropriately. The ease with which such content may be reproduced and an employee's belief that their actions are for the benefit of their employers may easily result in infringing behaviour in respect of such content.
Keeping tabs on employee productivity is another rationale given by some employers for their desire to monitor employee communications. In some industries, such as banking, insurance, telecommunications and travel, employee monitoring has been common place for some time. As many as 80% of employees in such industries may be subject to some level of telephone or computer-based monitoring. Also, with the advent of the Web, many other businesses are now interested in exploring ways of ensuring that company equipment and company time is not wasted on personal "surfing".
However, employers must take care not to infringe an employee's privacy rights. or violate laws prohibiting the interception of private communications. The later is an offense under the Criminal Code in Canada as well as the Electronic Communications Privacy Act and various wiretapping statutes in the US. Certain exceptions are usually available including the consent of the sender or recipient.
In some cases, statutory or common law rights of privacy may also limit the right to monitor someone without their consent. However, the applicability of particular laws or privacy rights to e-mail communications is often still not clear. Many of the cases decided to date have been in the US and in most cases they have tended to side with the employer.
A case in California brought by an e-mail administrator who was fired by Epson for complaining that her e-mail had been read was dismissed, notwithstanding that Epson had told its employees that their e-mail was confidential.
A similar lawsuit filed against Nissan Motor Company alleging tortious interception of employee e-mail messages was also unsuccessful. In the Nissan case, the California Court of Appeal affirmed a trial court's decision that found the employees did not have a reasonable expectation of privacy because they had signed a waiver form which provided that it was "company policy that employees ... restrict their use of company-owned computer hardware and software to company business."
More recently, a US District Court in Pennsylvania held that an expectation of privacy did not arise even though the employer, Pillsbury, had repeatedly promised not to intercept e-mail on its system. In that case, Pillsbury had advised its employees that all e-mail communications would remain confidential and that e-mail communications could not be used against its employees as grounds for termination. An employee who was fired for sending what the company deemed to be inappropriate and unprofessional comments to his supervisor using the e-mail system sued the company. The court dismissed the employee's claim before it even reached trial stating that it did not find a reasonable expectation of privacy in the communication notwithstanding the assurance by management.
However, courts have generally been progressively protecting employee's rights of privacy in the office. The recent e-mail related cases may simply be a situation of the law lagging behind technology. Also, in a particular case, an employer may affirm an employees' privacy rights either explicitly, such as through statements in manuals or corporate policies, or implicitly through a course of conduct.
There is a therefore a risk that the use or disclosure of either the contents of messages sent by employees or other information logged by the employer's computer system (such as the identify of the sender and recipient, etc.) may in a future case be found to constitute an unjustified invasion of privacy giving rise to civil damages even if such activity is not prohibited under criminal legislation. The risk of liability of an employer may also be substantially higher if messages are intercepted for purposes unrelated to the protection of an employer's business interests.
The important issue in determining whether an employer's monitoring activities violates the law or an employee's privacy rights may depend on whether the users of the system had a reasonable expectation that their messages will not be intercepted by any person other than the intended recipient. The use of passwords to gain access to the system, references to e-mail messages and mail boxes as being private and corporate policies are factors to be considered in determining the reasonable expectation of users.
The expectation of privacy may however be negated if users are advised as to the circumstances in which a message sent through the system may be subject to interception. Companies wary of lawsuits involving e-mail are encouraged to put in place explicit written policies dealing with e-mail and electronic monitoring. This topic will be covered in a future column.
Even though employees have not enjoyed much success to date in the courtroom regarding this issues, it should not be assumed that employers have an unlimited right to monitor e-mail or unlimited authority to act on whatever is discovered. Advice from counsel should be obtained before acting on information obtained from the interception of employee e-mail.
Monitoring Employee Communications
Practice exam
1. What recent developments give employees a chance to add new value to their
employer’s business?
a. ______
b. ______
2. According to paras.2-8, list 8 ways that employees can use e-mail and the
Internet for inappropriate or non-business purposes. In the second column,
give examples where possible.
Inappropriate or non-business purposes / Examplesa.
b.
c.
d.
e.
f.
g.
h.
3. In which of the above cases can the employers be held legally responsible for
their employees’ actions? (write the letters only)
______
4. What might limit an employer’s right to monitor his or her employees’
communications?
a. ______
b. ______
5. What idea do the Epson company (par.11),the Nissan Motor Company
(par.12) and the Pillsbury lawsuits illustrate?
______
______
6. The future tendency of the courts is to improve protection of employee’s
rights of privacy at work.
True False
Support your answer.
______
______
7. Under what circumstances should an employer not intercept employees’
messages?
______
______
8. What 3 factors should be taken into account in deciding if the employees have
reasonable expectations of privacy?
a. ______
b.______
c. ______
9. Under what conditions are expectations of privacy unrealistic?
______
______
10. How can employers protect themselves from email lawsuits?
______
11. What advice is given to employees before they decide to sue their employers
for the interception of their e-mails?
______
______
12. The main purpose of this article is to
a. to show that many companies monitor their employees’ use of electronic
communications.
b. discuss the problems connected with monitoring employee use of electronic
communications.
c. advise employees what to do to protect their rights of privacy in the office.
d. show that employers are uncertain of their legal rights to monitor employee
usage of electronic communications.
Answers to Monitoring Employee Communications
1. a. the exchange of e-mail between users on their internal network and other
entities on the Internet.
b. desktop Internet access
2.
Inappropriate or non-business purposes / Examplesa. employees sending confidential
information or corporate trade
secrets through the e-mail systems.
b. employees using an employer’s
Internet facilities to start or operate
their own businesses.
c. Defamatory, political or religious statements sent outside the company
d. Inappropriate material circulated
internally / A list called “A Beer is Better than Women” circulated through the e-mail system ended in a sexual harassment lawsuit.
e. Sexually explicit messages sent to
other employees
f. Pornographic images downloaded by
employees / In 1996 a physicist working for Canada’s Department of National Defence was arrested and charged with possessing and distributing child pornography.
g. Infringement of copyright or other
property rights
h. Employees wasting company equipment
and company time on personal surfing
3. c,d,e,f,g
4. a. infringing an employee’s privacy rights
b. laws prohibiting the interception of private communications.
5a. They illustrate that most law cases in the US have tended to side with the
employer OR that even when employers assure employees that their email was
confidential, the employee does not have a reasonable expectation of privacy.
6. True. Courts have generally been progressively protecting employee’s rights of
privacy in the office. OR ….the use or disclosure of either the contents of
messages sent by employees….may in future case be found to constitute an
unjustified invasion of privacy.
7. if the messages are intercepted for purposes unrelated to the protection of an
employer’s business interests.
8. a. the use of passwords to gain access to the system
b. references to email messages and mail boxes as being private
c. corporate policies.
9. if users are advised as to the circumstances in which a message sent through
the system may be subject to interception.
10. by giving employees explicit written policies dealing with e-mail and electronic
monitoring.
11. They should get advice from lawyers (counsel).
12. b