&gt; If they didn&#x27;t, and he is simply personal making accounts using the corporate network, then he would not have an expectation of privacy in my opinion.<p>Not quite right - this is one of the grey areas where the law defines something in between &quot;has an expectation of privacy&quot; and &quot;doesn&#x27;t have an expectation of privacy&quot;. Basically, the employer <i>generally</i> can&#x27;t access personal information on work computers, even connected to work networks, <i>unless</i> they have a reasonable belief that e.g. there&#x27;s evidence of the employee breaking policy in that personal information.<p>Even then, they must access as little as possible - for example, if you believe that the employee has personal information on their computer and having personal information is against policy in itself, and that&#x27;s the only thing you believe, all you can do is ascertain that it actually exists - you can&#x27;t go digging through people&#x27;s family photos or private communications unless you reasonably believe that there&#x27;s further policy violation in there.