Monday, April 22, 2013

King and Spalding's Surprising New Email Policy

ComputerOne of the areas that I have recently been researching regards the impact of technology of employees' expectations of privacy while at work or engaged in work outside of the workplace.  Though not completely related, now comes word that a large law firm, King & Spalding, has put into place a very aggressive email policy.  Here are some excerpts of that policy:

KING & SPALDING — FIRM-WIDE-ANNOUNCEMENT — EMAIL ACCESS

New Policy Prohibiting Access to Non-King & Spalding Email Accounts (“Personal Email Accounts”) from Firm Computers

The firm’s internal security experts, as well as our outside security experts, have advised us that accessing Personal Email Accounts from firm computers creates a significant security risk. Therefore, effective May 1, 2013, access to Personal Email Accounts (i.e., anything other than your kslaw.com email, including, but not limited, to personal email accounts like Gmail, Yahoo, Hotmail, cable company, etc.) from King & Spalding computers will no longer be permitted.

Most personal email sites will be blocked while you are on the firm’s network. However, you should not access Personal Email Accounts from a firm computer, even if you are not automatically blocked when trying to do so. For example, you should not access Personal Email Accounts from a firm laptop, even when the laptop is not connected to the firm’s network (i.e., from your home network, a hotel internet, etc.). The firm’s computer systems hold confidential information about our clients and the firm and, as you know from reading articles in the press, individual users who innocently click on malicious e-mails are often the cause of security breaches. We need your help in protecting our systems by following this and other security related policies, even when you can do things that you are not supposed to do . . . .

Permissible Ways of Accessing Personal Email Accounts

The prohibition against accessing Personal Email Accounts from firm computers does not impact your ability to access Personal Email Accounts such as Gmail, Yahoo or Hotmail from your own personal devices (e.g., smartphones, iPads, tablets, personal laptops, etc.) while at the firm . . . .

Clearly, K&S has acted decisively to protect against leaks of confidential information and perhaps against compromosing their system through viruses and other malware. Although this policy would appear to diminsih whatever expectations of privacy individuals have in personal email use during work, other cases, under the Electroic Communication Privacy Act (EPCA) stand for the proposition that whereas an employer has the ability to monitor work emails and other computer use for company violations, they do not have the same ability to monitor personal email accounts. 

Perhaps because of the inability to monitor personal email accounts, the firm decided to just prohibit all access to such email period.  I wonder whether there will be pushback from employees, or under current law, do employers like K&S have carte blanche when making these types of decisions in the workplace concerning email and use of technology?

PS

http://lawprofessors.typepad.com/laborprof_blog/2013/04/king-and-spaldings-surprising-new-email-policy.html

Workplace Trends | Permalink

TrackBack URL for this entry:

http://www.typepad.com/services/trackback/6a00d8341bfae553ef017eea7a5c8d970d

Listed below are links to weblogs that reference King and Spalding's Surprising New Email Policy:

Comments

I wonder if part of the motivation for this policy is to reduce the incidence of firm employees gossiping with one another by email about things like the billing practices of other firm employees. By creating a sharp divide between work email and personal email, perhaps they hope to avoid a DLA Piper type situation in which all-too-revealing emails were produced in discovery.

Also, I wonder if this policy is realistic. We are not in China or North Korea, and are accustomed to having open access to the Internet. If the firm really means it about K & S computers, won't people just carry their own laptops around?

Posted by: Lisa Lerman | Apr 22, 2013 10:45:55 AM

Given that they have no problem with employees using their personal e-mail via their phones etc., I have no problem with this policy. Even absent such a policy at my employer, I access my personal e-mail only via my phone while at work.

Posted by: Simon | Apr 23, 2013 6:07:31 AM

"If the firm really means it about K & S computers, won't people just carry their own laptops around?"

I work at a government agency that blocks just about everything through the most heavy handed net filters imaginable. Everyone just uses their phones for personal email now.

Posted by: ijw | Apr 23, 2013 9:31:07 AM

Post a comment