compliances , policies , security

Sample – Computer Systems Privacy Policy

February 7, 2012

For the protection of corporate, it’s employees and clients.

Employee Privacy

Corporate may collect, process, store and disseminate only that information regarding its employees which is necessary for the proper functioning of its business.

Before corporate employees collect private information about workers, customers, or other people, the need for such information must first be documented and approved by the Chief Information Officer.

Computer systems may be used to automatically collect information about the performance of workers.  This information accurately and realistically reflects their job-related performance.

Computer systems may be used to automatically collect information to manage and properly secure computer systems.

Corporate makes no representations or guarantees of privacy in its Information Technology Systems, and Users should not have any expectations of personal privacy in using these systems. Corporate, at its discretion, reserves the right to access and disclose any and all electronic information for any purpose, including computer files and messages sent over its Information Technology Systems.

Use of Corporate’s Information Technology Systems constitutes the User’s consent to the Company’s access to, and waiver of the User’s privacy interest (if any) in, all messages, data, or files on, or information about, the Information Technology Systems.

In general, corporate does not engage in blanket monitoring of employee communication.  However, it does reserve the right to monitor, access, retrieve, read and/or disclose employee communications when 1) a legitimate business need exists that cannot be satisfied by other means; 2) the involved employee is unavailable and timing is critical to a business activity; 3) there is a reasonable cause to suspect criminal activity or policy violation, or 4) monitoring is required by law, regulation or 3rd party agreement.

Customer Privacy

The collection of personal information about customers or potential customers is customary and expected.

All customer records containing personal information that are in the possession of corporate will be used only for purposes directly related to corporate business.

Access to this information must be strictly controlled on a need-to-know basis and the information must be used only for internal business purposes.  Unless the consent of the customer or potential customer is first obtained, all third party sale, exchange or other distribution is prohibited.

Corporate computer supported procedures must never require the provision of customer personal information, which is unnecessary for the completion of a transaction, or for the provision of products or services.

www.bestitdocuments.com