30 March 2000

Federal Privacy Commissioner's Guidelines on Workplace E-mail, Web Browsing and Privacy

"No surprises is the key to a successful e-mail and web browsing policy in the workplace," said Malcolm Crompton, Federal Privacy Commissioner, during the launch of his Office's Guidelines on Workplace E-mail, Web Browsing and Privacy, by the Federal Attorney-General, Daryl Williams.

"If people know from the outset what the rules are, then problems should be minimised," Mr Crompton said.

"I strongly urge public and private sector organisations to look at and implement the e-mail use and web browsing guidelines issued by my Office.

"The e-mail and web browsing guidelines recommend steps organisations can take to ensure staff understand the organisation's position and policies on e-mail use and web browsing.

"Employees need to be aware that the employer has a responsibility to ensure the technology is not used in unlawful or harmful ways.

"However, it's important that employers are open and clear about their office e-mail and Internet usage policy, including whether and how they monitor employee e-mail. In order to be clear, I encourage employers to draft and circulate, to all staff, an e-mail use policy.

"Employers also need to be aware that there are downsides to monitoring employee e-mails. The most common problem is that monitoring e-mail is intrinsically invasive and there is impact on staff morale and productivity," Mr Crompton said.

"While privacy is an important issue in the monitoring of e-mail, employees and employers need to be aware that e-mail can raise other issues involving sex, race, disability, racial vilification, copyright legislation and corporations law.

"I urge employers and employees to take up these Guidelines as a way of ensuring that the Australian workplace can evolve to better manage e-mail, web browsing and privacy issues.

"Elements that an e-mail use and web browsing policy need to cover include: adequate notice, explicit permitted and forbidden uses, what is logged and who looks at it, a mention of the organisation's computer security policy, how the organisation intends to monitor or audit staff compliance with the policy and regular review, update and circulation to staff of the policy.

Back to Top