577 Managing Privacy at Work and in Public | Protecting Information on Shared or Public Devices, and Knowing When Workplace Monitoring May Occur


Privacy can be harder to control when devices, screens, networks, rooms, or workplaces are shared with other people. A public computer may retain account information, a visible screen may reveal confidential details, and workplace systems may have rules or monitoring that differ from personal devices. Good privacy therefore depends on the situation as well as the technology.
This section covers shared and public devices, private conversations and screens, appropriate use of workplace equipment, separation of personal and work information, respect for coworkers' privacy, and the need to understand local workplace monitoring rules and policies.

577.1 Protecting Information on Shared or Public Devices

Shared and public devices can retain information after a session ends. Saved passwords, browser history, downloaded documents, autofill data, open tabs, and account cookies may allow the next user to see or reopen private material. A device can also have monitoring or management software controlled by the owner, school, workplace, library, or service provider.
Use the minimum sensitive information necessary on a device you do not control. Avoid saving credentials, sign out of accounts, remove downloaded files when permitted, and close sessions completely. A private browsing window can reduce some local history but does not make the activity invisible to the network, website, device owner, or account provider. For highly sensitive tasks, a trusted personal device is usually a better choice when available. Public or shared access should always change the assumptions a person makes about confidentiality. Shared access changes what privacy can reasonably be expected.

577.2 Keeping Screens and Conversations Private in Public Places

Privacy in public places can be lost without any hacking. A nearby person may read a screen, hear a phone call, photograph a document, or watch a password being entered. Crowded transport, waiting rooms, shared offices, cafés, and service counters can all create moments where confidential information is visible or audible.
Position screens and papers with the surroundings in mind and lower unnecessary notification previews when private messages could appear. Move sensitive calls to a more private place when possible, and avoid reading identity, financial, health, or workplace details aloud where strangers can easily hear. Screen filters can help in some situations but are not complete protection. Simple awareness of who is nearby often prevents more exposure than complicated technology. Before opening or discussing sensitive material, consider who can see the screen, hear the conversation, or observe information being entered in that public setting.

577.3 Using Workplace Devices With Appropriate Care

Workplace devices are usually provided for work and may be managed differently from personal equipment. Employers may apply security controls, backups, logging, software restrictions, or monitoring according to policy and local law. Personal messages or files placed on a work device may therefore have less privacy than the employee expects.
Use workplace equipment for its intended purpose and follow the organization's acceptable-use and security rules. Avoid storing unnecessary private documents or personal account passwords on work systems, especially when the device can be administered by others. Do not disable security tools to gain convenience. When the boundary is unclear, ask what personal use is permitted and what information the organization may access rather than assuming a work device behaves like a privately owned one. Keeping personal material to a minimum on managed equipment reduces confusion about what may be backed up, logged, retained, or accessed under workplace rules.

577.4 Separating Personal and Work Information

Mixing personal and work information can create accidental disclosure in both directions. A personal cloud account may receive confidential work files, while a work phone may contain private photographs or messages. Shared contact lists, calendars, backups, and browser profiles can also connect information that was meant to remain in separate contexts.
Use separate accounts, folders, profiles, or devices where the organization provides them and where separation is practical. Send work documents through approved systems instead of forwarding them to personal email simply for convenience. Keep personal recovery information out of shared work records unless it is genuinely required. Clear separation makes access, backup, ownership, and deletion easier to understand when a person changes roles or leaves an organization. Good separation also makes it easier to return work records, close access, or keep personal information when employment or responsibilities change.

577.5 Respecting Other People's Privacy at Work

Respect for privacy at work includes information seen or heard during ordinary duties. A colleague's contact details, pay information, health issue, family matter, customer record, private message, or performance discussion may be accessible without being appropriate to share. Access granted for a job task is not permission to use the information for curiosity or gossip.
Use confidential information only for the work purpose that requires it and avoid discussing private matters where unrelated people can hear. Lock screens and return papers to the proper place instead of leaving them visible. If information is sent to you by mistake, tell the appropriate person rather than forwarding it. Workplace privacy supports trust and can also be part of professional, contractual, or legal responsibilities that vary by organization and location. When access is no longer needed for the task, leaving the information alone is part of respecting the limits of the role.

577.6 Knowing When Workplace Monitoring May Occur

Workplace monitoring can include access logs, security cameras, internet traffic, email systems, device management, location records, or productivity tools, depending on the job, technology, policy, and local law. The existence of monitoring does not mean every action is watched continuously, and the permitted scope differs widely between places.
Read the organization's policies and notices to understand what systems are monitored, why monitoring occurs, how data may be used, and who can access it. Ask for clarification if the wording is unclear, especially before using a work system for personal matters. Employees may have rights or protections that depend on jurisdiction, so legal questions should be checked against local rules. Knowing the boundaries helps people make informed choices without assuming either complete privacy or unlimited employer access. Policy and local law determine the real boundaries, so assumptions are a poor substitute for checking.