Technology and Communications Systems

A Technology and Communications Systems policy sets clear expectations for appropriate business and limited personal use of employer-provided devices and networks, protects confidential information through security and BYOD rules, and explains monitoring and privacy limits while preserving employees' legally protected rights.

How to Write a Technology and Communications Systems Policy

• Start with "why" and introduce the concept and purpose.
• Define the technology and communications systems covered and state they are primarily for business use.
• Explain there is no expectation of privacy and that use and data on systems may be monitored.
• State that information created, stored, or transmitted on systems belongs to your organization.
• Require compliance with security and data protection practices, including for remote work.
• Allow limited personal use within boundaries that protect work performance, resources, and policy compliance.
• Prohibit using personal email or personal devices for work without authorization and require compliance with BYOD rules when approved.
• Ban workplace photos, audio recordings, and video recordings without authorization, while recognizing legally protected recording activity.
• Reinforce that all workplace policies apply to technology use, including conduct, anti-harassment, confidentiality, social media, and external communications.
• Require compliance with applicable laws and regulations when using systems.
• Close with an expectation of good judgment and responsible use.

For advice on writing a Technology and Communications Systems policy in a specific jurisdiction, see below.