I have researched the situation for Germany and the usual recommendation for the employer is to put something like the following in the contract:<p>1. Private use is forbidden.<p>2. Employer can&#x27;t be held responsible for storing or processing private data if employee didn&#x27;t follow 1.<p>Not exactly but quite similar to the ruling described in the original post.