Can employees see what the security tool records about their device?
Yes, they can ask, because the GDPRGDPR: General Data Protection Regulation. The EU data protection law (Regulation (EU) 2016/679). gives every person a right of access to personal data about them. If network records can be linked to an employee, for example through a laptop named after them or an address assigned to their computer, they may request a copy and information on purposes, recipients and retention, subject to the limits the GDPR and national law allow, such as protecting other people's rights or an ongoing investigation. As employer you are the controller and answer the request within the time limit set in Article 12 of the GDPR. Prepare for it: know where security records are kept, who can export them and how to remove data about other people. NetSenX, as your processor, supports such requests under its data processing agreement, and its records concern device connections, not message content.
General information, not legal advice. National laws can add to the EU texts quoted here, for example deadlines, forms or reporting channels: check your own country's rules.
Read next
Related questions
- What should an acceptable use policy say about security monitoring?
- How long should security logs about employee devices be kept?
- Is AI-based emotion or productivity monitoring of staff allowed in the EU?
- How do we know a former employee's device is no longer on our network?
- What should IT check on the network when an employee leaves?
Terms used here
- GDPR (General Data Protection Regulation)
- The EU data protection law (Regulation (EU) 2016/679).