Earlier quoted context omitted.
> It is allowed, contrary to eg the EU, where this is not allowed. Its allows in most of the EU apart from germany where there are strict limits. however you can still record what your users are doing for purposes of detecting fraud. This is where it differs from the USA, where they can do anything because they have no data protection laws.
Would it be too much to ask to not make stuff up?
An employer am allowed to record all your actions for the purposes of detecting fraud and or illegal activity. The method or recording and the way the employer stores and allows access to that recording must be "reasonable"
For example if you are using slack, gchat or teams, all your conversations are logged in the compliance system. Every action you make in m365 is also logged. AWS actions are also logged if you have cloud trail enabled
All you emails are also recorded and stored for n years.
If you have zscaler or some other threat detection system every site that you visit will be recorded. The anti phishing plugin you have will also log what sites you are looking at. Theses are not automatically illegal, its how the data is stored and processed that determines the illegality.
Now, lets get to meta. As part of their leaking detection system, in about 2024 they started routinely taking screenshots of all users every n minutes. One could argue that it wasn't proportionate. However for holland, france and germany, the workers councils should have been informed.
The thing that was illegal was the covert nature, or at least not explicitly telling employees that they were taking screenshots. not the screenshots themselves.
For the AAI bullshit that meta are pushing, again depending on how its done its not necessarily against the various EU/UK data protection laws to record the data. Where it gets interesting is how and where the data is processed later on.
To blindly say that "EU says it can't happen" is far too simplistic and not accurate to say the least.