For sale: Want to own a business forum ? Submit your sealed bid to acquire businessforum.uk

By using Apprenticeforums services you agree to our Cookies Use and Data Transfer outside the EU.
We and our partners operate globally and use cookies, including for analytics, personalisation, ads and Newsletters.

  • Join our UK Small business Forum

    Helping business owners with every day advice, tips and discussions with likeminded business owners. Become apart of a community surrounded by level headed business folk from around the UK


    Join us!

Monitoring Internet/Computer Usage

N

Neil Ballantyne

New Member
Just saw an interesting article on the Reg - The legal risks of uncontrolled IM use ? The Register - about the implications for employers regarding the use of business systems.

The article is basically saying that even though a company bans it's employees from a particular activity, the employer can still be held liable if the employee breaks that ban.

Bearing in mind that the article is quoting a white paper with at least a bit of a sales pitch in it, it still raises the question of whether people here do log internet usage?, and do you do anything with the information gathered?
 
Power Lunch Club

Power Lunch Club

New Member
It is and interesting debate. I know several large companies...like NCR...when an employee's logs on to an IM system they get a warning message tell then that the messages will be kept for a certain length of time.

Not sure that the company could or even should be prosecuted just becuase the employee has an IM system on their computer. But if the companies want to be 100% sure, then remove or not allow the employee's access to these systems. I am pretty sure an employee could reek as much havoc with strong views written down on a piece of paper and sent to a newspaper.

Yes if a company bans IMing, it must show that it has taken reasonable steps to ensure that such a system cannot be installed or used on a computer. It's a bit like the hacker story recently....America is trying to prosecute the hacker, but really what was shown up was their lack of control and security on their own system.

Could IM systems be fully disabled?
 
stugster

stugster

Active Member
Could IM systems be fully disabled?

Oh yes :) if you've got the right IT bods working for you ;)

A simple firewall rule for blocking outgoing/incoming 1863 does the job on the entire business network (for MSN Messenger)

Anything can be done ;)
 
N

Neil Ballantyne

New Member
It depends on how much effort you want to put into it, and what your reasons are for blocking it.

Yes you can block port 1863, and that will stop most users, but the savvy ones will use a web client or just connect over port 80. You can end up in a situation where you are spending more time trying to prevent an action than the action itself is losing you.

It changes things when you're talking about potential liability to the business, rather than loss of productivity, or when you have a significant enough user base to justify spending the time.
 
Hmmm...

Is there a lawyer in the house???

The article is basically saying that even though a company bans it's employees from a particular activity, the employer can still be held liable if the employee breaks that ban.

I'm not entirely convinced about this... bit of a sweeping statement...

Vicarious liability is based upon the principle of 'respondeat superior'. Any party which has the right or ability to control the actions of a subordinate can be held liable for those actions.

In the case of the employer-employee situation It's necessary to establish whether or not the act in question occurred while the employee was performing tasks of their employment. In order for this to be the case, the act must have been authorised by the employer.

If an act is not in itself authorised but is sufficiently connected with an act that has been authorised, then it could be considered an 'improper' means of carrying out the individual's responsibilities of employment. Vicarious liability would then apply.... But it gets a wee bit more complex than that

The courts may determine whether an action was a 'detour' and a 'frolic'.

If an employee is acting outside of their normal employment, the employer may still be liable. This will be the case if the employee has taken a 'detour' (that is, if they are still performing the duties of their employment, but simply in a roundabout way). A 'frolic', however, is deemed to have occurred if the employee has acted entirely of their own volition and is not acting on behalf of the company. In these cases, the employer will not be liable.

Now; IF an action is specifically banned it's difficult to see how a vicarious liability can be established...

51) The use of orange safety beacons fitted to motor vehicles is restricted to private land, airports and airfields and while the vehicle is being used for the purpose of inspecting, maintaining, adjusting, renewing or installing video or film apparatus which is in, on, under or over a road, or for any purpose incidental to any such use.

One of our T&Cs which the ex-police officers among you will immediately recognise as paraphrased from The Road Vehicles Lighting Regulations 1989. Not only does this paragraph appear in our T&Cs but in our transport policies and procedures document. Why? Well, among other things it effectively protects us from 'causing or permitting' mis-use of these warning lights; such as might happen if an employee parked awkwardly outside the chip-shop on the way home and decided to hit the switch for the lightbar rather than park up properly....

though there's no actual ban on stopping outside the chip shop and switching on the strobes, clearly such an action is outside the limits set by us for the use of the strobes, so switching them on is no longer a 'detour' but a 'frolic'.... And we would not be liable to any extent....

I honestly can't see why the same broad principal would not apply to a company banning the use of IM...

I could cite similar examples in respect of IP law. In fact one of the reasons we're so 'heavy' on the subject of correct, well documented IP management is to protect ourselves and clients from vicarious liability brought about by the mishandling through casual transfer of IP...

Yes you can block port 1863, and that will stop most users, but the savvy ones will use a web client or just connect over port 80. You can end up in a situation where you are spending more time trying to prevent an action than the action itself is losing you.

It changes things when you're talking about potential liability to the business, rather than loss of productivity, or when you have a significant enough user base to justify spending the time.

Presumably though employees would be specifically NOT authorised to circumvent the steps you've taken to prevent the action.. Thus in a 'frolic' situation and relieving you of liability....
 
doogie

doogie

New Member
It depends on how much effort you want to put into it, and what your reasons are for blocking it.

Yes you can block port 1863, and that will stop most users, but the savvy ones will use a web client or just connect over port 80. You can end up in a situation where you are spending more time trying to prevent an action than the action itself is losing you.

Plus there's the area of mobile clients which could be run on company mobiles with data connections.
 
Employment Law Services

Employment Law Services

EmployEasily Legal Services
As Matt has pointed out, getting your T&Cs right is critical.........many, many companies I speak to don't realise the implications of not having up to date contracts of employment supported by robust HR policies and procedures..........the cost of failing to keep up with the latest legislation can be very high indeed!!
 
As Matt has pointed out, getting your T&Cs right is critical.........many, many companies I speak to don't realise the implications of not having up to date contracts of employment supported by robust HR policies and procedures..........the cost of failing to keep up with the latest legislation can be very high indeed!!

Actually this is a very interesting and important point....

Robust policies and procedures are absolutely necessary across the board. HR is very like IPR management in that mistakes can be DEVASTATING. And people in general just don't realise how tricky it can be!

It's essential to ensure you have professional advice; and the cheapest and most efficient way to do this is to hire in a specialist...
 
Top