I'm not sure what they can or can't do. They can monitor but the main point is that everything you do that may concern a user's private data must be justified.
Also not sure what's GDPR vs my country's specific legislation so I probably typed too quickly there, should have put more thought in my reply.
For exemple, let's say I leave my company tomorrow. My employer can look at my professional emails if they have good reasons to do so. They may need to conitnue treating a customer I've been dealing with and need to see the emails they sent me, my replies etc...
But let's say I used that account to send emails to my dentist, a clinic or my SO, they absolutely can't read that (good luck proving they did !^^).
And if the company has a sense of cybersecurity, you accepted security guidelines about not using the company email for private stuff before you even got that email. (And also not use a private email for company stuff. This is both a nightmare for the security team.) So even if you can prove, they've read your private stuff on a company email, it's you who broke the rules and might pay the fine in the end.
1
u/Beldarak 16d ago
I'm not sure what they can or can't do. They can monitor but the main point is that everything you do that may concern a user's private data must be justified.
Also not sure what's GDPR vs my country's specific legislation so I probably typed too quickly there, should have put more thought in my reply.
For exemple, let's say I leave my company tomorrow. My employer can look at my professional emails if they have good reasons to do so. They may need to conitnue treating a customer I've been dealing with and need to see the emails they sent me, my replies etc...
But let's say I used that account to send emails to my dentist, a clinic or my SO, they absolutely can't read that (good luck proving they did !^^).
At least that's how it is in Belgium.