A privacy officer is assessing whether employees retain a reasonable expectation of privacy in communications made on company systems, since that expectation often decides whether monitoring is lawful. Which circumstances most strongly tend to defeat an employee's reasonable expectation of privacy in those communications? (Select TWO.)
- AThe employer keeps a clear, communicated policy stating that messages on company systems may be monitored at any time. Correct
- BThe employee labelled the messages private and tucked them into a personal folder kept on the employer-issued company device.
- CThe employee used the employer-owned email account and equipment provided solely for work purposes. Correct
- DThe employee logged into a separate, password-protected personal webmail account through the company browser.
- EThe employer accessed the messages without telling staff that any monitoring of company systems would ever take place.
Why A is correct: A clearly communicated monitoring policy puts employees on notice and is the classic factor that defeats a reasonable expectation of privacy.
Why B is wrong: A subjective wish for privacy on an employer-owned system does not create an objectively reasonable expectation against monitoring.
Why C is correct: Use of employer-owned systems furnished for work weakens any expectation of privacy because the employer controls and may access them.
Why D is wrong: A password-protected personal account can preserve an expectation of privacy even on a work device, so this cuts the other way.
Why E is wrong: Silent monitoring with no notice tends to preserve, not defeat, a reasonable expectation of privacy in the communications.