Changes to email privacy legislation
The Australian Computer Society (ACS) has called on the Federal Government to consider adopting an auditing system for random employee email checks.

The organisation is also asking for alert and logbook systems in the government’s revision of the country’s email privacy laws, to reflect contemporary modes of communication in today's networked society.
The ACS recommends the development of authorisation process and policy to identify who can authorise the accessing of employee emails. Organisations must also maintain a clear logging system of when email records are accessed by a person other than a participant in the email communication (for example the IT department as a “non participant”) and for what purpose.
A permission and/or alert system for employees should be imposed if their emails are accessed by a non-participant as part of routine corporate business. ICT practitioners must be bound by a code of conduct which makes it a disciplinary offence for them to use or divulge any information obtained through exercise of any statutory or corporate interception power.
The ACS also recommends that organisations be subject to random audits in order to determine they are not in breach of privacy laws and that they should adopt and publish a clear email and web use policy to their staff.
In light of the Federal Government’s move to give employers the power to vet emails at work based on terrorism powers and concerns, ACS president Kumar Parakala explains that it is timely to consider a more holistic review of laws addressing email access to reflect sophisticated new digital communication channels.
"The Federal Government’s decision to review Privacy Laws to protect national security raises the issue of professional conduct around new technologies and the absence of a robust system of checks and balances to ensure that privacy is protected," says Parakala.
"We are living in a new era where uninterrupted access to the web and private and corporate email is part of life – particularly with younger generations. Privacy laws must reflect this and corporate Australia should develop and implement contemporary email policies, which are in line with a work life balance."
12-May-2008
Related articles: