augustf’s Twitter Archive—№ 64,329

@whstancil GDPR is usually understood to cover employees’ personal/HR-related data most strongly, but communications personally identifiable as theirs likely qualify as well. The rule is generally whether the employer has a “legitimate interest” in utilizing it. All I can say is, lol.