What Is Almost Never Collected
The list that answers most of the fear, because the things people worry about most are usually the things not being gathered.
Worry about monitoring attaches to specific capabilities. Most of them are absent from ordinary workplace configurations, and saying so plainly is more useful than reassurance.
The boundary described in “What Is Almost Never Collected” should be settled before any workforce platform is configured. An organisation reviewing the official Monitask website for how to monitor employees without being intrusive can make the use more transparent by naming the purpose, selecting only necessary settings and documenting who may see or correct each record.
Your passwords
Not collected in any ordinary configuration.
For an independent perspective related to “What Is Almost Never Collected”, consult the ICO guidance on monitoring workers; it provides a useful external check on privacy, fairness and governance assumptions before a policy or configuration is approved.
Password managers and login systems are designed so that even administrators cannot read them.
Where keystroke capture exists, this is one of the strongest arguments against it, and it is why most organisations do not deploy it.
Personal accounts and messages
Messages in a personal application, on a personal account, are not visible to a work monitoring system in normal setups.
On a work device the application being open may be recorded; the contents are a different matter.
And on your own device with a work profile space, the personal side is outside the management channel entirely.
Your webcam
Covert webcam access is not a feature of ordinary workplace monitoring, and in most jurisdictions would be unlawful.
Operating systems show an indicator when the camera is active.
Supervised examinations and some regulated settings are the exception, and they are announced.
Your phone, if it is yours
A personal phone not enrolled in any work system is outside the scope entirely.
If it is enrolled, the work side is managed and the personal side generally is not.
Which is a question worth asking specifically rather than assuming either way.
What you do at home, off their systems
Activity on your own device, on your own connection, in your own time is not collected by workplace monitoring.
Public social media is visible to anybody, which is a different matter and not monitoring.
The ones people are most surprised about
Nobody is watching live. Real-time observation of individuals is rare and labour-intensive; the data sits in logs.
Deleted files on company systems may persist in backups, which is retention rather than surveillance.
And an idle period is recorded as absence of input, not as evidence of anything.
Why the list matters
A person who believes everything is captured behaves differently from one who knows what is.
The second can work normally and raise a specific concern if something is wrong.
The first is anxious about things that are not happening, which costs them and helps nobody.
What to check
Which of these were you assuming were collected?
Have you asked, rather than inferred?
Is anything personal on a work account or work device?
And would the answer change how you work?