What People Are Surprised By
The findings that recur when people actually look at what is held about them, in both directions.
People who ask or request their data are usually surprised. The surprises fall into a consistent set, and most of them are not the ones expected.
The practical lesson in “What People Are Surprised By” is to make work visible without treating visibility as certainty. Organisations exploring ethical employee monitoring practices for ethical employee monitoring can add structured project and time evidence, provided the purpose is disclosed and any interpretation is checked with the people affected.
Surprise one: how much is just inventory
Device model, operating system, patch state, encryption status, software installed, last connection.
For an independent perspective related to “What People Are Surprised By”, consult the NIST Privacy Framework; it provides a useful external check on privacy, fairness and governance assumptions before a policy or configuration is approved.
The largest category by volume and the least interesting: it describes the machine rather than the person.
Many people find this reassuring once they see it, because they expected activity and found asset records.
Surprise two: the check-in log reads like attendance
When the device connected, when it was idle, when it woke.
It was collected for technical reasons and reads like a record of presence.
Which is a fair reading and one employers should anticipate, because people will interpret it that way whether or not it is used that way.
Surprise three: how much is in tickets and email
Notes written about you in support tickets.
References in emails between managers.
These are personal data and frequently more revealing than any monitoring record — and they come as more of a shock than the activity logs.
Surprise four: how little anybody looked
Access logs, where they exist, usually show that nobody opened the record.
The data accumulated and sat there.
This is the commonest finding and the one that changes how people feel most, because the fear was of being watched rather than of being recorded.
Surprise five: a category nobody mentioned
Full application inventory, including personal applications on an enrolled device.
Communication metadata.
Something a supplier collects that the employer did not think to describe.
This is the one worth following up, politely and specifically.
The emotional shape
People approach this expecting to feel worse and usually feel better.
The exception is finding something that was not disclosed, which feels considerably worse than the thing itself warrants.
Which is an argument for employers to publish fully, and for employees to ask before assuming.
What to do with an unwelcome finding
Ask what it is for and under what basis.
That question is answerable and the answer is frequently that nobody chose it — it was a default.
Defaults get changed when somebody points at them, which is the most common useful outcome of the whole exercise.
What to check
Have you ever seen what is actually held about you?
Would you expect inventory or activity to dominate?
Is there anything in tickets or email you would rather not read?
And if you found an undisclosed category, would you ask or assume?