# How do we keep network security monitoring from becoming employee surveillance?

By fixing the purpose, the data and the people with access before you start, and writing it down. State the purpose as detecting attacks on devices and systems, and exclude performance or behaviour monitoring. Collect metadata only, keep it for a defined period, and limit access to the few people who handle security, with a log of what they do. Tell employees what is monitored and why, involve the works council or employee representatives where they exist, and carry out a data protection impact assessment if the processing is likely to be high risk. Review the set-up once a year. NetSenX supports this by design: it watches devices and connections, never decrypts traffic, reports AI use per device and program rather than per person, and keeps an audit log of who did what in the account.

General information, not legal advice. National laws can add to the EU texts quoted here, for example deadlines, forms or reporting channels: check your own country's rules.

FAQ: [People, HR and insider risk](https://netsenx.com/en/faq/people) · https://netsenx.com/en/faq/how-do-we-keep-security-monitoring-from-becoming-employee-surveillance

## Read next

- https://netsenx.com/en/is-someone-inside-your-network
- https://netsenx.com/en/dpa
- https://netsenx.com/en/eu-data-residency

## Related questions

- [Can an unused office computer be used by attackers?](https://netsenx.com/en/faq/can-an-unused-office-computer-be-used-by-attackers)
- [How do we spot activity on a computer that should be idle?](https://netsenx.com/en/faq/how-do-we-spot-activity-on-a-computer-that-should-be-idle)
- [What should IT do with the computers of employees on long-term leave?](https://netsenx.com/en/faq/what-should-it-do-with-computers-of-employees-on-long-term-leave)
- [How do we monitor contractors' laptops on our network?](https://netsenx.com/en/faq/how-do-we-monitor-contractors-laptops-on-our-network)
- [Should contractors get a separate network?](https://netsenx.com/en/faq/should-contractors-get-a-separate-network)