We have a very clear IT policy which states that all data at work belongs to the company and therefore we have the right to access this. However, we know that employers do have personal emails and folders held on their computers. As a practice we have a process in place which prevents people/managers from gaining access to employees systems without following an approval process. I would like to know what process you have in place to manage access to employees once they have left. Many managers don't think to get the outgoing employee to transfer over info prior to their leaving date and our IT dept will close down the mailbox, etc. HR do not want to be seen as the gate keeper to every access to mailbox/folder request due to managers forgetfulness, etc and would prefer the employee prior to leaving to grant access. However, the question asked is 'what if the employee refuses to give permission - when the data is the Company's anyway'? Do we need to do this?
Really would appreciate any info on what other companies do to manage this process, especially now that we have GDPR.
