Monitoring employees' internet and telephone use at work may contravene human rights laws, after a landmark case in the European Court of Human Rights last week.
The case involved a public-sector employee, who won €3,000 in damages and €6,000 in court costs and expenses, after her communications were intercepted by her employer, Carmarthenshire College, based in South Wales. Lynette Copland successfully took the UK government to court after her personal internet usage and telephone calls were monitored by one of her bosses in 1999.
The ruling means that the private use of company telecoms equipment and internet access may be protected under European human rights legislation, if the company has an acceptable personal-use policy and fails to inform the employee that their communications may be monitored. Employee communications are also covered by human rights legislation if the organisation has no explicit acceptable use policy and fails to inform the employee of the monitoring of personal email.
Join in
Who owns your old email messages?
"If a member of staff leaves, is the email address that he was using owned by him or the company?"
Privacy experts at law firm Pinsent Masons said that although businesses now have clear guidance for monitoring work communications under the Regulation of Investigatory Powers Act (RIPA) 2000, personal communications at work may be protected by the European Convention on Human Rights, and the Human Rights Act 1998. "The lawful business practice regulations allow an employer to monitor and intercept business communications, so the court is implying that private use of a telecommunications system, assuming it is authorised via an acceptable-use policy, can be protected [by human rights legislation]," said Dr Chris Pounder, a privacy specialist. "The ruling is important in that it reinforces the need for a statutory basis for any interference with respect to private use of a telecommunications system by an employee," Pounder added.
Copland brought the case against the government after her communications were intercepted by the deputy principal of Carmarthenshire College, a publicly funded body, where she was employed as a personal assistant to the college principal. Her lawyers successfully argued that the activity breached her rights under Article 8 of the Convention on Human Rights, which says that "everyone has the right to respect for his private and family life, his home and his correspondence".
The government admitted that monitoring had taken place of dates, times and participants in email and telephone conversations, and of Copland's internet usage. The college had no policy in place at the time informing employees that their communications might be monitored.
"According to the court's case-law, telephone calls from business premises are prima facie covered by the notions of 'private life' and 'correspondence' for the purposes of Article 8," said the court's ruling. "It follows logically that emails sent from work should be similarly protected under Article 8, as should information derived from the monitoring of personal internet usage. The applicant in the present case had been given no warning that her calls would be liable to monitoring, therefore she had a reasonable expectation as to the privacy of calls made from her work telephone. The same expectation should apply in relation to the applicant's e-mail and internet usage."
Copland's damages and costs will be borne by UK taxpayers. She remains in post at the college.
Talkback
Careful companies reading between the lines of this item will notice that all the high-flying legal language and talk of human rights are orbiting the real issue: acceptable use policies. Companies – and employees – operating without an acceptable use policy are like aerialists operating without a net. If there is no clear understanding about what is or is not allowed, the greater law of the land will pertain, and that might or might not be in the best interest of the firm or the employees. Smart companies will explicitly allow personal use with guidelines, partly because we all know people will do it anyway, but mostly because it creates a better workplace environment. Look to the array of personal services available to Google employees and look at the hard work and long hours they put in.
David Karp, Director Of Marketing, Ipswitch
I would tend to agree but that demands a leadership within organisations that is sadly missing in 99.999% (perhaps more).
Trying to make the case that well informed, motivated staff can benefit from a more light touch on communications and information controls is like trying to stream HD Video on a dial-up account.
Our organisation has a blanket ban on a vast range of information resources including the regional newspaper which is the only significant source of local business news. The reason for the blanket ban? Some people may look at the classified ads!
Email monitering is an important tool for computer security experts. It enables preventive measures in contrast to responding to an aftermath of abuse.
See:
This post has been removed by a moderator.