Suppose someone from the IS department notifies you that one of your employees is sending many personal emails. When you ask how they know the emails are personal, you are told that they measure account activity and that when suspicious email usage is suspected the IS department reads employees’

email. Do you think such reading is legal? Is it ethical? How do you respond?