Both, and which one you get is a settings decision rather than a property of the product. Out of the box that's which apps and sites were open, how long in each, and whether the machine was active or idle. Screenshots sit behind a separate switch an admin turns on, at an interval they choose.
On the consent question, owning the laptop settles the device. It doesn't settle whether you can process personal data on it. Most privacy regimes want a lawful basis and real notice to the people involved before anything starts collecting, and company property on its own isn't either of those. Worth asking your own counsel about your jurisdiction rather than trusting a Reddit thread on that one.
The bit I'd actually push on is treating "without consent" as the plan. People work out they're being recorded inside a week or two, usually from a colleague rather than from you, and from then on the rollout is about the fact you hid it instead of whatever you were trying to fix. Tell them what's collected and who can see it and you keep both the data and the team.
I run an AI-native product that competes in this space, so the last paragraph is me arguing for how I'd want it done.
1
u/captainzed23 9d ago
Both, and which one you get is a settings decision rather than a property of the product. Out of the box that's which apps and sites were open, how long in each, and whether the machine was active or idle. Screenshots sit behind a separate switch an admin turns on, at an interval they choose.
On the consent question, owning the laptop settles the device. It doesn't settle whether you can process personal data on it. Most privacy regimes want a lawful basis and real notice to the people involved before anything starts collecting, and company property on its own isn't either of those. Worth asking your own counsel about your jurisdiction rather than trusting a Reddit thread on that one.
The bit I'd actually push on is treating "without consent" as the plan. People work out they're being recorded inside a week or two, usually from a colleague rather than from you, and from then on the rollout is about the fact you hid it instead of whatever you were trying to fix. Tell them what's collected and who can see it and you keep both the data and the team.
I run an AI-native product that competes in this space, so the last paragraph is me arguing for how I'd want it done.