Helping people with computers... one answer at a time.
•
Listen to the podcast: Can my employer
track what I'm doing on the internet?. 
Transcript
This is Leo Notenboom for askleo.info.
An incredibly common theme for questions I get has to do with privacy. How to maintain it, how to break it, and when it's reasonable to expect it.
This week I got, once again, the question: "Can my employer track what I'm doing on-line?".
The answer? "Of course they can".
So can your ISP at home. Or your school. In fact, anyone providing your internet access can, if so inclined, peer into your surfing, IMing, gaming, or other on-line habits. It's not even that hard if you have the level of access that your these service providers have.
They key is that phrase: "if so inclined."
Now, most of us are not nearly as interesting as we might think we are. By that I mean that while your employer, school, or ISP could snoop in on you... would they really bother? Most of us just aren't that interesting.
Of course there are a couple of exceptions. If you're doing something illegal, for example, the government could force your provider to trace or snoop on you. We've seen illegal music downloaders get caught this way.
The work place has an extra level of concern as well: because you're using their equipment and connectivity, they have every right to restrict and monitor what you do even if what you're doing is perfectly legal. The most common monitoring is probably to verify that you're not goofing off on company time. But if you're doing something against company policy, for example, they might also notice. They might see that you're emailing the competition or maybe using certain internal code names in external communications. It's even perfectly legal for them to install spyware on the machine that they own but that you use in order to monitor what you do on your computer.
So how do you maintain some semblance of privacy if your provider can watch?
First off, be realistic. Just because they can watch you doesn't mean they are. In a sea of thousands upon thousands of customers, your data is probably just so much noise to your service provider.
Second, live up to your employer's or school's expectations. If they have a policy against non-work or school related internet use then save that for your own time.
If you are concerned about your privacy you really have only two choices: don't do things that you'd be concerned about using providers you don't trust, or try and hide what you're doing using techniques such as encryption. Unfortunately in the latter case, your provider may not see what it is you're hiding, but they will be able to tell that you're hiding something.
I'd love to hear what you think. Visit askleo.info and enter 11479 in the go to article number box to access the show notes and to leave me a comment. While you're there, browse over 1,100 technical questions and answers on the site.
Till next time, I'm Leo Notenboom, for askleo.info.
Article C3023 - May 13, 2007
Its ok that the facility is being provided by the employer and so on,but is not the fundamental priviledge for the user to get his data safe for his use.is it not a sort of enchroachement in some bodies privacy.
Kindly suggest some means to check such intrusion.And what should be checked on the machine to confirm such intrusions.
27-May-2010
Posted by: yksharma at May 26, 2010 11:35 AM
This sort of answers my question but not fully. What about if you are using your personal computer at work? I am using the company's internet, which is allowed after business hours, since we actually live on site. I am wondering if my employer can see what sites I'm visiting even though they have no access to my computer?
Posted by: Bess at September 27, 2011 2:41 PM@Bess
Posted by: Mark J at September 27, 2011 9:57 PMYour employer can see any activity that happens on their network.
Employers CAN track you; but if you are allowed to surf personal things, keep it strictly to "clean" stuff, like news websites, PCPro magazine, the local newspapers, AutoTrader (as examples).
However, be aware the logs are deleted after a fair period of time, usually 6 or so months, but it varies.
Posted by: AN Other at October 30, 2011 4:27 PMIf you work from home over a VPN (virtual private network) using your own computer, can the company track what you are doing when you are not connected to the VPN? My understanding is that for company laptops, once you connect back to the company network, it will download all activity that was on that laptop. Just was not sure if something similar was the case for personal computer when you connect to the vpn. Is this still the case if you delete the internet history and cache as well?
Posted by: Bob at May 22, 2012 8:27 AM