An organization allows employees to access the Internet on their workstations for limited personal use.

Reviewing the Internet history allows the employer to determine the nature and frequency of personal use without overstepping privacy boundaries, such as monitoring email.

SPHR domain guidance recommends “ensuring investigative practices comply with policy and legal frameworks.” Employers should use objective data and established protocols before taking further action​.