To be safe, Michaluk said employers should assume the term includes data collected from a wide range of technologies: Standard endpoint data, data from endpoint detection and response (EDR) agents, data generated from mobile device management (MDM) applications, company-owned vehicle telematics, and, of course, network behaviour analytics and video surveillance footage. It could even include logging website traffic on a web server, he said.<\/p>\n
Note that mobile device management applications could cover not only company-owned devices but also employee-owned devices if that is mandated by the employer.<\/p>\n
Employers must provide copies of the policy to all employees, as well as to employees assigned by temporary help agencies.<\/span><\/span><\/span><\/p>\n \u201cWhat\u2019s interesting is before the province created any legislation that governs privacy in the workplace, they created a more targeted piece of legislation,\u201d Michaluk said. The Conservative government of Doug Ford has talked about bringing in a provincial private sector privacy law,<\/a> but no legislation has as yet been introduced.<\/p>\n Among Canadian jurisdictions, only B.C., Alberta and Quebec have private sector legislation obliging firms to give notice to employees of the collection of personal information.<\/p>\n Ontario employers shouldn\u2019t find the obligation onerous, Michaluk said. \u201cIt should be feasible to inventory of all these technologies without too much work and display them to employees. If we have mature systems for network security we should have inventoried this already.\u201d<\/p>\n In fact, he said, it would be a matter of good data governance. \u201cWe ought to be governing our use of these technologies and more specifically the network [in the workplace] anyway.\u201d<\/p>\n \u201cIf we don\u2019t have an immediate view of what data we\u2019re collecting across the network, let\u2019s go do that as a matter of governance. Forget compliance. Even disclosing that [to employees] is good governance because you\u2019re telling your users what\u2019s going on.<\/p>\n \u201cThe real benefit is it may cause your users\u2019 behaviour to change. It may cause them to understand you\u2019ve got a network that records all sorts of data of users for legitimate uses and they should take their personal use of the network somewhere else.\u201d<\/p>\n In a blog<\/a> Michaluk and an associate offered detailed advice to employers on the proposed legislation. For example, for security reasons, there\u2019s no need to disclose the software the company uses. To comply with the proposed law \u2013 unless it changes \u2013 employers could create a simple table like the one below:<\/p>\n They also noted that electronic monitoring in Ontario is permissible unless there is an agreement with employees that forbids it.<\/p>\n To meet the law, firms should update their hardware and software inventory, Michaluk said, as well as their acceptable use of corporate networks policies.<\/p>\n The post Proposed Ontario employee electronic monitoring disclosure law may help firms: Lawyer<\/a> first appeared on IT World Canada<\/a>.<\/p>\n","protected":false},"excerpt":{"rendered":" Disclosure should include a wide range of technologies, says a lawyer. But ultimately it could benefit firms by possibly changing risky behaviour of employees<\/p>\n The post Proposed Ontario employee electronic monitoring disclosure law may help firms: Lawyer<\/a> first appeared on IT World Canada<\/a>.<\/p>\n","protected":false},"author":17,"featured_media":0,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"_acf_changed":false,"footnotes":""},"categories":[21,361,16],"tags":[402,403,396,388],"class_list":["post-20303","post","type-post","status-publish","format-standard","hentry","category-emerging-tech","category-privacy","category-security","tag-dotgov","tag-ontario-government","tag-postmedia","tag-privacy-security"],"acf":[],"_links":{"self":[{"href":"https:\/\/technewsday.com\/staging\/wp-json\/wp\/v2\/posts\/20303","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/technewsday.com\/staging\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/technewsday.com\/staging\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/technewsday.com\/staging\/wp-json\/wp\/v2\/users\/17"}],"replies":[{"embeddable":true,"href":"https:\/\/technewsday.com\/staging\/wp-json\/wp\/v2\/comments?post=20303"}],"version-history":[{"count":1,"href":"https:\/\/technewsday.com\/staging\/wp-json\/wp\/v2\/posts\/20303\/revisions"}],"predecessor-version":[{"id":20304,"href":"https:\/\/technewsday.com\/staging\/wp-json\/wp\/v2\/posts\/20303\/revisions\/20304"}],"wp:attachment":[{"href":"https:\/\/technewsday.com\/staging\/wp-json\/wp\/v2\/media?parent=20303"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/technewsday.com\/staging\/wp-json\/wp\/v2\/categories?post=20303"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/technewsday.com\/staging\/wp-json\/wp\/v2\/tags?post=20303"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}![\"Graphic](\"https:\/\/i.itworldcanada.com\/wp-content\/uploads\/2022\/03\/Borden-Ladner-Gervais-graphic-Ontario-Bill-88-March-2022.jpg\")