We’ve been in a cyberpunk not-dystopia for decades. There is a lot of case law that there’s no expectation of privacy in the workplace. [0]
Employers can do stuff that is illegal for private citizens.
For example, employers can key log everything you do on your work equipment. Without your consent. They can video everything you do at work, without consent. They can keep the fingerprint you use to log in and keep the eye scan and biometric data for many purposes.
Note, I’m not defending this. Just stating facts. As they are useful facts and if I expect my employer to not do this then I need to confirm they have some practice in place to prevent it of their own volition because US law doesn’t prevent it.
I learned a lot about this when working on my org’s ssl MITM policy so it would not MITM for personal sites. While legally they could proxy and log bank logins and such, it is internal policy not to do this and to communicate to employees. Now employees can’t commit fraud with it or facilitate crimes (eg sell passwords) but they could do lame stuff like sell employee profile data (eg, prepend banks with XBank).
I only do work on work equipment. I keep a personal phone and personal laptop for any personal business.
If I didn’t want to be monitored in this way, I’d have to seek out a rare company and I’m not even sure to how to audit to make sure they actually adhere to their stated policies.
Note, this is only for employees on employer owned equipment. So I think it’s perfectly normal for Apple to log biometric data on test devices and use it for training. And to use all images on those devices for training purposes.
Employers can do stuff that is illegal for private citizens.
For example, employers can key log everything you do on your work equipment. Without your consent. They can video everything you do at work, without consent. They can keep the fingerprint you use to log in and keep the eye scan and biometric data for many purposes.
Note, I’m not defending this. Just stating facts. As they are useful facts and if I expect my employer to not do this then I need to confirm they have some practice in place to prevent it of their own volition because US law doesn’t prevent it.
I learned a lot about this when working on my org’s ssl MITM policy so it would not MITM for personal sites. While legally they could proxy and log bank logins and such, it is internal policy not to do this and to communicate to employees. Now employees can’t commit fraud with it or facilitate crimes (eg sell passwords) but they could do lame stuff like sell employee profile data (eg, prepend banks with XBank).
I only do work on work equipment. I keep a personal phone and personal laptop for any personal business.
If I didn’t want to be monitored in this way, I’d have to seek out a rare company and I’m not even sure to how to audit to make sure they actually adhere to their stated policies.
Note, this is only for employees on employer owned equipment. So I think it’s perfectly normal for Apple to log biometric data on test devices and use it for training. And to use all images on those devices for training purposes.
[0] https://www.justia.com/employment/hiring-employment-contract...