To take it a step further, while we need to educate employees and make sure they know that this is just a new way potentially to cause trouble and to get into trouble, I don’t think employers should get into the policing business, at least in most cases. Unless your organization does have highly sensitive information or national security interests or other things like that, policing employee communications is likely to be a negative event. It’s going to create an atmosphere where employees feel like they’re being spied upon all the time and I think for most employers they don’t want to do that because it’s going to make it very difficult to attract top talent or to keep the top talent that they have. No one likes being spied on. Unless you have a very strong reason to be looking for information, you should not be policing employees’ use of their private devices.
Make It Easy For People To Report Violations and Protect Whistleblowers From Retaliation
What is more effective is to make sure that employees have an easy, efficient way to report concerns. Rather than policing everybody, make it really easy for everyone to let you know if they become aware of some inappropriate activity that involves personal communication devices or social media. That could be an employee whistleblower ethics hotline that people could call, it could be a website where people can log in anonymously and report ethics and compliance allegations. It can be any number of things, but they have to make sure that everyone knows: one, this is wrong, and two, if you see it let us know. Because otherwise the only thing we have as a last resort is to police and no one really wants to go down that road.
Finally, make sure that people are protected against retaliation. I think particularly in a school context where students are being bullied, one of the greater fears that the students have is that if they speak up, it’s only going to make matters worse. They’re going to get bullied more; they’re going to be retaliated against, and so on and so forth; it’s the same in any organization. So, if an organization wants people to truly come forward and report potential ethics and compliance violations, they have to have a robust program in place to protect people from retaliation.