What Your Employer Can Legally Know About You — Quiz

Under UK GDPR, which principle requires that employers only collect monitoring data for purposes that have been explicitly stated in advance — and not repurpose it later?

Which exception in the US Electronic Communications Privacy Act (ECPA) allows employers to monitor employee email on company systems?

What protection does the National Labour Relations Act (NLRA) provide that limits employer monitoring in the US?

What is the ICO's position on covert monitoring of employees in the UK?

In which US state is an employer required by statute to provide advance written notice before monitoring employee telephone and email communications?

Explain why the ICO recommends that UK employers avoid relying on 'consent' as the lawful basis for employee monitoring under UK GDPR.

Describe two key differences between how UK GDPR and US federal law (ECPA) treat the same employee monitoring activity — for example, continuous screenshot monitoring on a company laptop.

A company operates a BYOD policy. What principle, recognised in both UK and US frameworks, limits how far the employer's monitoring can reach on a personal device?