Do limitations exist with respect to the type of data obtained, processed and/or transferred?
Many US companies’ data collection guidelines seek to obtain: employees’ email and/or hard drive contents, prior performance reviews, photographs and/or video surveillance, demographic information about racial or gender makeup of a manager’s group, security access logs, documents related to allegations of past misconduct, attendance records, training records, expense records, calendars, mobile phone records, and/or documents related to prior investigations. German data protection law imposes various restrictions to obtain, process or transfer cross-border such employee data.
