Health, Family and Sensitive Searches
The category where incidental collection has the most consequence, and the simplest precaution has the most value.
Searching for a diagnosis, looking at a support service, reading about a family situation. These produce ordinary browsing entries and carry a different weight from everything else.
The boundary described in “Health, Family and Sensitive Searches” should be settled before any workforce platform is configured. An organisation reviewing visit the official site for time tracking with screenshots can make the use more transparent by naming the purpose, selecting only necessary settings and documenting who may see or correct each record.
Why this category is different
Health, beliefs, union membership, sexual orientation and similar attract additional protection in most regimes.
For an independent perspective related to “Health, Family and Sensitive Searches”, consult the ICO guidance on monitoring workers; it provides a useful external check on privacy, fairness and governance assumptions before a policy or configuration is approved.
Which means incidental collection of them is a problem for the employer rather than an ordinary log entry.
And it is a problem for you if it is seen, independent of any rule.
How it gets collected
Browsing logs by full address rather than by domain.
Screenshots, where they exist.
Full application inventory on an enrolled personal device, where the names alone reveal a great deal.
Search terms, where a filtering system records them.
None of this is aimed at you and all of it captures the same thing.
The precaution
Use a personal device for anything in this category.
Not because you are doing something wrong, but because it is the one category where exposure has real consequences and the avoidance is trivial.
A phone on mobile data takes the whole question away.
If the only device available is theirs
Shift workers, people without a personal device, people in a hospital waiting room using a work laptop.
The realistic advice: a private browsing window, which prevents local history, though not network logging.
And an awareness that network logs record the domain rather than the page, which for most purposes is considerably less revealing.
Occupational health and support services
Communications with occupational health, counselling services and employee assistance programmes should be excluded from monitoring entirely.
Many employers do this and do not say so.
Asking whether these channels are excluded is a precise and reasonable question, and a no is a significant finding.
If it has already been collected
Raise it with the data protection contact rather than with your manager: it is a processing question.
State the category and how it arises — browsing logged by full address, for instance.
The usual outcome is a configuration change, because the organisation does not want this data either.
What not to conclude
That somebody has seen it. Almost certainly nobody has.
That it will be used. Almost certainly it will not.
The reason to be careful is the tail: the situation you cannot predict, where everything held becomes relevant.
The family dimension
Searches about a relative's illness, a child's difficulty, a partner's situation.
These are other people's sensitive matters, recorded against your name.
Which is the strongest reason of all to keep them off work systems — the exposure is not only yours to accept.
What to check
Does your employer log browsing by domain or by full address?
Are occupational health and support channels excluded?
Do you have a personal device available for this category?
And is anything of a family member's on a work system?