Should organizations be allowed to monitor employees' online activity while in the workplace (or during work hours), especially as many of them continue to work from home from their own personal devices? When is it considered an invasion of privacy?

Should governments be allowed to compel private tech companies to provide their customers' encrypted informationto aid law enforcement or intelligence efforts (i.e., grant them 'special access')? What are the downsides? At what point should security and safety trump privacy, over what business interests, for how long, and under the risk of what legal and business consequences?