Boss asked me to copy files from ex-CEOs computer

The name of the pictureThe name of the pictureThe name of the pictureClash Royale CLAN TAG#URR8PPP





.everyoneloves__top-leaderboard:empty,.everyoneloves__mid-leaderboard:empty margin-bottom:0;







up vote
47
down vote

favorite
3












There has recently been a change in the corporate hierarchy. The former CEO/President is now, technically, just an employee (although, to be sure, an employee with a lot of weight) and a shareholder. The new CEO/President has asked me to copy some documents from the ex-CEOs laptop discreetly and without anyone's knowledge. Additionally, the request was made verbally, and I have no documentation to back me up if I get caught.



It feels wrong to me... you know, the whole, "with great power..." kind of thing.



My questions are:



  • Is there any reason to believe that this a legitimate request?

  • What can I do to protect myself and ensure my actions are legal?






share|improve this question


















  • 26




    Do you know why your boss wants you to secretly copy the files? Is there a reason you can't just ask ask the former CEO for them? The fact that your boss doesn't want the former CEO to know raises a lot of warning flags for me.
    – David K
    Sep 2 '14 at 14:59







  • 27




    Make sure you get these orders in writing (printed page, whatever)! I don't suspect there's a problem, but if something goes wrong, you don't want someone saying you were trying to steal the documents.
    – Michael Kohne
    Sep 2 '14 at 15:00






  • 2




    @JoshP I'm not sure how asking someone to copy some files could result in "legal issues". Are you expecting the former CEO to somehow damage company information or relationships? That would be extremely unprofessional on his part, and could be a suable offense.
    – David K
    Sep 2 '14 at 15:14






  • 3




    @JoshP I'm still not sure why your boss feels the need to hide this data copy from the former CEO, and maybe you don't know either. I don't doubt that the company has the right to access company property at any time, but something still seems fishy.
    – David K
    Sep 2 '14 at 15:55






  • 2




    @JoshP: That generally makes all the difference in the world. If it's not a laptop owned by the company then your legal ability to surreptitiously pull documents off of it is shaky at best. If this is the case then I wouldn't do it.
    – NotMe
    Sep 3 '14 at 14:01
















up vote
47
down vote

favorite
3












There has recently been a change in the corporate hierarchy. The former CEO/President is now, technically, just an employee (although, to be sure, an employee with a lot of weight) and a shareholder. The new CEO/President has asked me to copy some documents from the ex-CEOs laptop discreetly and without anyone's knowledge. Additionally, the request was made verbally, and I have no documentation to back me up if I get caught.



It feels wrong to me... you know, the whole, "with great power..." kind of thing.



My questions are:



  • Is there any reason to believe that this a legitimate request?

  • What can I do to protect myself and ensure my actions are legal?






share|improve this question


















  • 26




    Do you know why your boss wants you to secretly copy the files? Is there a reason you can't just ask ask the former CEO for them? The fact that your boss doesn't want the former CEO to know raises a lot of warning flags for me.
    – David K
    Sep 2 '14 at 14:59







  • 27




    Make sure you get these orders in writing (printed page, whatever)! I don't suspect there's a problem, but if something goes wrong, you don't want someone saying you were trying to steal the documents.
    – Michael Kohne
    Sep 2 '14 at 15:00






  • 2




    @JoshP I'm not sure how asking someone to copy some files could result in "legal issues". Are you expecting the former CEO to somehow damage company information or relationships? That would be extremely unprofessional on his part, and could be a suable offense.
    – David K
    Sep 2 '14 at 15:14






  • 3




    @JoshP I'm still not sure why your boss feels the need to hide this data copy from the former CEO, and maybe you don't know either. I don't doubt that the company has the right to access company property at any time, but something still seems fishy.
    – David K
    Sep 2 '14 at 15:55






  • 2




    @JoshP: That generally makes all the difference in the world. If it's not a laptop owned by the company then your legal ability to surreptitiously pull documents off of it is shaky at best. If this is the case then I wouldn't do it.
    – NotMe
    Sep 3 '14 at 14:01












up vote
47
down vote

favorite
3









up vote
47
down vote

favorite
3






3





There has recently been a change in the corporate hierarchy. The former CEO/President is now, technically, just an employee (although, to be sure, an employee with a lot of weight) and a shareholder. The new CEO/President has asked me to copy some documents from the ex-CEOs laptop discreetly and without anyone's knowledge. Additionally, the request was made verbally, and I have no documentation to back me up if I get caught.



It feels wrong to me... you know, the whole, "with great power..." kind of thing.



My questions are:



  • Is there any reason to believe that this a legitimate request?

  • What can I do to protect myself and ensure my actions are legal?






share|improve this question














There has recently been a change in the corporate hierarchy. The former CEO/President is now, technically, just an employee (although, to be sure, an employee with a lot of weight) and a shareholder. The new CEO/President has asked me to copy some documents from the ex-CEOs laptop discreetly and without anyone's knowledge. Additionally, the request was made verbally, and I have no documentation to back me up if I get caught.



It feels wrong to me... you know, the whole, "with great power..." kind of thing.



My questions are:



  • Is there any reason to believe that this a legitimate request?

  • What can I do to protect myself and ensure my actions are legal?








share|improve this question













share|improve this question




share|improve this question








edited Sep 2 '14 at 21:20









IDrinkandIKnowThings

43.9k1398188




43.9k1398188










asked Sep 2 '14 at 14:42









JoshP

341138




341138







  • 26




    Do you know why your boss wants you to secretly copy the files? Is there a reason you can't just ask ask the former CEO for them? The fact that your boss doesn't want the former CEO to know raises a lot of warning flags for me.
    – David K
    Sep 2 '14 at 14:59







  • 27




    Make sure you get these orders in writing (printed page, whatever)! I don't suspect there's a problem, but if something goes wrong, you don't want someone saying you were trying to steal the documents.
    – Michael Kohne
    Sep 2 '14 at 15:00






  • 2




    @JoshP I'm not sure how asking someone to copy some files could result in "legal issues". Are you expecting the former CEO to somehow damage company information or relationships? That would be extremely unprofessional on his part, and could be a suable offense.
    – David K
    Sep 2 '14 at 15:14






  • 3




    @JoshP I'm still not sure why your boss feels the need to hide this data copy from the former CEO, and maybe you don't know either. I don't doubt that the company has the right to access company property at any time, but something still seems fishy.
    – David K
    Sep 2 '14 at 15:55






  • 2




    @JoshP: That generally makes all the difference in the world. If it's not a laptop owned by the company then your legal ability to surreptitiously pull documents off of it is shaky at best. If this is the case then I wouldn't do it.
    – NotMe
    Sep 3 '14 at 14:01












  • 26




    Do you know why your boss wants you to secretly copy the files? Is there a reason you can't just ask ask the former CEO for them? The fact that your boss doesn't want the former CEO to know raises a lot of warning flags for me.
    – David K
    Sep 2 '14 at 14:59







  • 27




    Make sure you get these orders in writing (printed page, whatever)! I don't suspect there's a problem, but if something goes wrong, you don't want someone saying you were trying to steal the documents.
    – Michael Kohne
    Sep 2 '14 at 15:00






  • 2




    @JoshP I'm not sure how asking someone to copy some files could result in "legal issues". Are you expecting the former CEO to somehow damage company information or relationships? That would be extremely unprofessional on his part, and could be a suable offense.
    – David K
    Sep 2 '14 at 15:14






  • 3




    @JoshP I'm still not sure why your boss feels the need to hide this data copy from the former CEO, and maybe you don't know either. I don't doubt that the company has the right to access company property at any time, but something still seems fishy.
    – David K
    Sep 2 '14 at 15:55






  • 2




    @JoshP: That generally makes all the difference in the world. If it's not a laptop owned by the company then your legal ability to surreptitiously pull documents off of it is shaky at best. If this is the case then I wouldn't do it.
    – NotMe
    Sep 3 '14 at 14:01







26




26




Do you know why your boss wants you to secretly copy the files? Is there a reason you can't just ask ask the former CEO for them? The fact that your boss doesn't want the former CEO to know raises a lot of warning flags for me.
– David K
Sep 2 '14 at 14:59





Do you know why your boss wants you to secretly copy the files? Is there a reason you can't just ask ask the former CEO for them? The fact that your boss doesn't want the former CEO to know raises a lot of warning flags for me.
– David K
Sep 2 '14 at 14:59





27




27




Make sure you get these orders in writing (printed page, whatever)! I don't suspect there's a problem, but if something goes wrong, you don't want someone saying you were trying to steal the documents.
– Michael Kohne
Sep 2 '14 at 15:00




Make sure you get these orders in writing (printed page, whatever)! I don't suspect there's a problem, but if something goes wrong, you don't want someone saying you were trying to steal the documents.
– Michael Kohne
Sep 2 '14 at 15:00




2




2




@JoshP I'm not sure how asking someone to copy some files could result in "legal issues". Are you expecting the former CEO to somehow damage company information or relationships? That would be extremely unprofessional on his part, and could be a suable offense.
– David K
Sep 2 '14 at 15:14




@JoshP I'm not sure how asking someone to copy some files could result in "legal issues". Are you expecting the former CEO to somehow damage company information or relationships? That would be extremely unprofessional on his part, and could be a suable offense.
– David K
Sep 2 '14 at 15:14




3




3




@JoshP I'm still not sure why your boss feels the need to hide this data copy from the former CEO, and maybe you don't know either. I don't doubt that the company has the right to access company property at any time, but something still seems fishy.
– David K
Sep 2 '14 at 15:55




@JoshP I'm still not sure why your boss feels the need to hide this data copy from the former CEO, and maybe you don't know either. I don't doubt that the company has the right to access company property at any time, but something still seems fishy.
– David K
Sep 2 '14 at 15:55




2




2




@JoshP: That generally makes all the difference in the world. If it's not a laptop owned by the company then your legal ability to surreptitiously pull documents off of it is shaky at best. If this is the case then I wouldn't do it.
– NotMe
Sep 3 '14 at 14:01




@JoshP: That generally makes all the difference in the world. If it's not a laptop owned by the company then your legal ability to surreptitiously pull documents off of it is shaky at best. If this is the case then I wouldn't do it.
– NotMe
Sep 3 '14 at 14:01










8 Answers
8






active

oldest

votes

















up vote
20
down vote



accepted










I have been in this position before, and while it could be something illegal or unethical, it could just as well be a perfectly legitimate request with a legitimate reason.



When someone in a high access position like this leaves their position, there's often legitimate concern that he/she will destroy company data that they feel entitled to (or want to deny the company), and/or use that company data in their next role to undermine their former employer or for personal gain (think poaching customers, or bringing business relationships with them to the next place). Obviously, making sure this doesn't happen is a matter that must be dealt with discretely, as tipping the person off will only make it happen faster, and generally speaking, no one wants these suspicions to be common knowledge.



You could ask for written permission... but that would probably conflict with the goal of discretion, and especially if it's a company owned laptop, in the US, that data belongs to the company, not the ex-employee, regardless of his position. So the company's agents (the new CEO) are legally entitled to that data, and allowed to be as discrete or as obvious as they want about getting it.



My advice to you is that rather than just copying the files requested, is to take a backup of the laptop, with whatever means you have at your disposal and document the request and process. (Disk image, same software you use to backup your servers, scripted robocopy or whatever.) Compared to a targeted copying of important files, backing up an executive's machine when they leave is hard to frame as snooping or unauthorized access, which makes it difficult for you to get thrown under the bus, especially if you keep a written record of what you did when you did it, and at whose request. In this case, you would then give the backup to the new CEO, and instruct him on how to search and extract the files he wants. That way if there's any malfeasance going on, you just did what a good IT guy does, and made backups, while the new CEO was the one who went snooping through the backups.



And, going forward, it's a good idea to get this process enshrined in an official policy - it protects you from any accusations if it's just the normal process, and every now and then, you'll get to be the hero when you can pull the critical files that some ex-employee had on their machine that no one knew they were missing, until they need them, NOW.






share|improve this answer
















  • 13




    Although I agree that it's a perfectly legitimate request, I disagree that written permission would cause an issue with discretion. The NEW CEO is making this request, I'm sure they could easily hand the tech a document telling him to perform the action without that becoming common knowledge. Even if the new CEO just wrote something in word, printed it out and signed it.
    – NotMe
    Sep 3 '14 at 0:23










  • @ChrisLively Perception, if nothing else. Everyone knows that if you want to keep something a secret, you don't write it down... probably the reason it was issued as a verbal request in the first place, IMO.
    – HopelessN00b
    Sep 3 '14 at 0:46






  • 1




    Thanks for the insight. I agree, the backup is a nice middle ground... get everything instead of targeting this or that. The literal amount of time it takes to do that could be a hurdle though.
    – JoshP
    Sep 3 '14 at 4:11










  • I very much appreciate ALL of the answers here! The insight and advice is exactly what I'd hoped for. I accepted this answer because I believe Hopeless hit the nail on the head with the best course of action, given the moderately awkward, and potentially delicate situation.
    – JoshP
    Sep 3 '14 at 23:41







  • 3




    @BroSlow Instead of going through the data for the CEO, and handing off what's relevant, this gives the data to the CEO and lets him decide what's relevant, which is safer for everyone involved. The company doesn't have an extra set of eyes going over sensitive/confidential data, and the IT guy isn't going to see anything he's not supposed to. Also, this takes something that could be perceived as "snooping" or "unauthorized access" by the IT guy and turns it into part of a sysadmin's normal job duties - backing up the company's important data. If it's not already backed up, it should be.
    – HopelessN00b
    Sep 4 '14 at 4:52

















up vote
66
down vote













What a quandary! In the US, a company owns the network and the data transmitted across it. Additionally, if the former CEO's laptop was issued by the company, the company has complete access to it as well. Legally, you should be fine following the direction from you new CEO, but get that direction in writing.



If you don't get the direction in writing, then your work could be characterized as hacking. Think about it like this: if your company tells you to get the data, it's safe; if you go to get the data on your own, it's a crime. It is very possible that the new CEO is simply curious about the data, and if you are caught and don't have written permission to get the data, he could easily throw you under the bus. In this case, denying he asked you to get the information and then telling the authorities that you committed a hacking crime.



Now, ethics. If your company's new CEO is asking you to gather the information in a manner that feels wrong, it probably is. When reviewing electronic records, companies usually maintain a chain-of-evidence that starts with the original request for data in writing. Once that is done, the request gets approved by Legal, and then you go to work. The request can be as simple as "get the data" or as explicit as "all e-mails from date a to date b, and install a keylogger". Once you get the data, you treat it as evidence and strictly follow legal's requirements for maintaining the chain of evidence.



In your case, your new CEO asked you to pull data from the old CEO's laptop in a manner that suggests he doesn't care about the chain-of-evidence. He also asked you to do so in a manner that is dangerous for you if you are caught. I would ask for the request in writing, or not do it all. In fact, if the worst thing happens and he fires you for not getting the information, at least you'll be unemployed and not in jail.






share|improve this answer


















  • 4




    Thanks for your answer. I'll ask for the direction in writing. I don't think that will be a problem.
    – JoshP
    Sep 2 '14 at 15:26






  • 20




    From a European point of view, the first paragraph is really a surprise. In Europe, an employer can't check a machine of an employee, etc. Only for urgent matters (like the prevention of theft or sharing data with a competitor), this is allowed. Such cases are sometimes settled at the European Court of Human Rights.
    – Willem Van Onsem
    Sep 2 '14 at 18:36







  • 18




    @CommuSoft From a UK standpoint this case sounds illegal under the Data Protection Act, which does take into account EU rights to privacy and correspondence. I imagine a lot of countries have laws against convert unjustified monitoring. I've read up a bit and it looks like, as usual, Americans are going to have to suck it up.
    – Nathan Cooper
    Sep 2 '14 at 19:17






  • 5




    In the U.S., it depends on whether the employee has a reasonable expectation of privacy. Many (if not most) companies explicitly state that employees have no expectation of privacy when using company equipment. This is also almost always true for government employees. Many employers (including the federal government) also go to the length of putting a pop-up message that displays to users at logon warning them of the lack of an expectation of privacy on the machine that they are logging in to.
    – reirab
    Sep 2 '14 at 21:10






  • 3




    In general the advice to get it in writing is solid, however I disagree that this would constitute hacking. The OP appears to be in the Tech department and has access to perform these actions. Provided the company has an employee manual that includes text about no privacy for company computers there's even less of a case. Could you cite any existing cases and/or law to support your supposition? I ask simply because I'd like to know more. The only way I can think of is for the OP to have a legal issue is if the employer decides to bring action which seems incredibly unlikely.
    – NotMe
    Sep 3 '14 at 0:30

















up vote
7
down vote













Who owns the former CEO's laptop? If it's a corporate laptop then the documents on it are also the property of the company, assuming your legal team were sober when they wrote/reviewed your acceptable use policy.



It might not be pleasant to have to sneak around to do this but it's certainly not a legal issue, and possibly not even an ethical one.






share|improve this answer
















  • 1




    Thanks for your answer. I've certainly had the suspicion like in the second bullet point above.
    – JoshP
    Sep 2 '14 at 15:04










  • Who knows? Maybe the whole team was drunk :D
    – MadTux
    Sep 2 '14 at 17:51










  • @JoshP The question is: is this your former CEO former laptop or the current one?
    – Pierre Arlaud
    Sep 3 '14 at 8:33










  • Well, the OPs boss may be simply ashamed that they don't have the copy of the important documents that ex-CEO had on their laptop. As careless as it is to behave as trains would not exist, this happens...
    – user1023
    Sep 3 '14 at 9:55










  • @PierreArlaud, former CEO's (still current employee's) current laptop.
    – JoshP
    Sep 3 '14 at 20:41

















up vote
3
down vote













  1. You need to determine whether this is an official request to surreptitiously copy these docs from the CEO's laptop, or a surreptitious request to surreptitiously copy these docs from the CEO's laptop. Paper trail, please. You don't want to experience the equivalent of the standard "Mission: Impossible" tape recording: "... in the event of your death or capture, the Secretary of Defense will disavow any knowledge of your actions ..." In sum: the request must be official, and it must be in writing.


  2. You need to determine whether the CEO's laptop is the property of the company or the property of the CEO. The official request for your action must either specify that the laptop is the company's property or that the laptop is the CEO's property but the company has implicit permission to access it.


If both of these conditions are not met, the new CEO's request is a "no-go" as far as I am concerned, if I were in your position.



My answer is based on the presumption that you work in the US.






share|improve this answer





























    up vote
    2
    down vote













    You need to get the request in writing. If this request were above-board, you'd have it already.



    [US] Company hardware and the files contained therein are still company property and they are entitled to the data, but there are less-shady ways to exercise this right. The situation you're describing sounds personal-- if it were a legal matter, your firm or the DA would have hired professional forensic technicians to fulfill this request instead of coming to you secretly. If you even turn on that laptop, the evidence is tainted and will be thrown out in court.



    Either way, it's none of your business why he's asking. It's only your business how he's doing it.



    Write to him instead, mentioning "per your request to retrieve files from _'s laptop, if this is a legal matter, the evidence will be inadmissible..." and try to coax authorization out of him that way.



    He's not going to admit to wanting to snoop on former employees' personal data, so at the very least you can protect both of you by asking him to make a formal request of you to do something broad like "please make a backup image of the ex-CEO's laptop for archival's sake/to comply with our official corporate document retention policy." He can pick through it at his leisure to find whatever he needs, and you can disavow any knowledge of the contents.



    Don't ask, don't tell, but insist on a paper trail. When this ends with him posting intimate photos of the ex-CEO's wife on 4chan, when it comes back to you (and it will), you'll have a paper trail showing his request and the subsequent chain of custody and be able to make a case for plausible deniability.






    share|improve this answer



























      up vote
      1
      down vote













      Seconding the motion. If it's a company laptop, policy is almost certainly that the company has the right to read anything on that machine. However, you do want this directive in writing, to make clear that you are doing it on behalf of the company, as directed by management, rather than on your own. If in any doubt, ask if you can get the blessing of the legal department (without mentioning who the target is, just a hypothetical employee). Legal may also have advice on what tools you can and can't safely use, and what files you should particularly avoid looking at.



      If it's the employee's personally owned machine, that's a different kettle of worms and you probably want the legal department to confirm that, by using it for company business, the employee has granted the company the right to retrieve this data. Getting the order in writing will probably protect you, but on this version I'd play it safe.






      share|improve this answer



























        up vote
        -1
        down vote













        If your boss asks you to do a full backup of the company pc, you do a full backup of the company pc. If there is no written document about it, your boss probably did not ask you. ;)



        Simple as that, just ask him for it, he is probably fine with signing it, but like most people just not aware of the potential risks he puts you in.



        The "full backup" might prevent you from snooping around and leaving timestamps on files, and so on. Not sure how that works.






        share|improve this answer



























          up vote
          -4
          down vote













          Do it, and do it quietly.



          This sort of request could very well be the corporation gathering details and preserving information in the event of either a lawsuit against the company from the CEO, or a lawsuit against the company due to shareholder and or other financial fraud. It could very well be coming from the legal company to your boss and he or she might himself or herself be under the very same call for discretion. It is better to do it, and keep a low profile about it, then it is to appear to be dragging your feet on behalf of a CEO who is on his or her way out due to reasons that you may not know.






          share|improve this answer
















          • 4




            You're recommending a course of action based on nothing more solid than your unrestrained speculation. That's unacceptable as an answer.
            – Vietnhi Phuvan
            Sep 3 '14 at 6:09










          • I used to work doing IT support to aid in the discovery of class action lawsuits involving major fortune 500 companies. I know something about how these things go. By NOT getting the data, and leaving a paper trail essentially documenting it, he's tipping off the CEO and that could actually get him in trouble. But hey, if you think he should get put on the stand and have his career picked about by lawyers, go right ahead.
            – TJ Bandrowsky
            Sep 3 '14 at 15:15










          • All management requests to me must be done through the proper channels and in the right way. I could just walk up, right off the street, as a total stranger to the OP and ask him to sneak around and get the ex-CEO's data, using your exact speculative rationale.
            – Vietnhi Phuvan
            Sep 3 '14 at 15:23











          • @VietnhiPhuvan That's a bad example; it's the CEO who made the request.
            – bye
            Sep 3 '14 at 16:23











          • @Poldie I was addressing my previous comment to TJBandrowsky. I don't know what you mean by "bad example" Any request that goes to me has to be AAA - authenticated, authorized, and accounted for. Otherwise, the requesters can sit on their hands and twiddle their thumbs while I expedite their request -into the trash can.
            – Vietnhi Phuvan
            Sep 3 '14 at 16:29










          protected by Community♦ Sep 3 '14 at 15:41



          Thank you for your interest in this question.
          Because it has attracted low-quality or spam answers that had to be removed, posting an answer now requires 10 reputation on this site (the association bonus does not count).



          Would you like to answer one of these unanswered questions instead?














          8 Answers
          8






          active

          oldest

          votes








          8 Answers
          8






          active

          oldest

          votes









          active

          oldest

          votes






          active

          oldest

          votes








          up vote
          20
          down vote



          accepted










          I have been in this position before, and while it could be something illegal or unethical, it could just as well be a perfectly legitimate request with a legitimate reason.



          When someone in a high access position like this leaves their position, there's often legitimate concern that he/she will destroy company data that they feel entitled to (or want to deny the company), and/or use that company data in their next role to undermine their former employer or for personal gain (think poaching customers, or bringing business relationships with them to the next place). Obviously, making sure this doesn't happen is a matter that must be dealt with discretely, as tipping the person off will only make it happen faster, and generally speaking, no one wants these suspicions to be common knowledge.



          You could ask for written permission... but that would probably conflict with the goal of discretion, and especially if it's a company owned laptop, in the US, that data belongs to the company, not the ex-employee, regardless of his position. So the company's agents (the new CEO) are legally entitled to that data, and allowed to be as discrete or as obvious as they want about getting it.



          My advice to you is that rather than just copying the files requested, is to take a backup of the laptop, with whatever means you have at your disposal and document the request and process. (Disk image, same software you use to backup your servers, scripted robocopy or whatever.) Compared to a targeted copying of important files, backing up an executive's machine when they leave is hard to frame as snooping or unauthorized access, which makes it difficult for you to get thrown under the bus, especially if you keep a written record of what you did when you did it, and at whose request. In this case, you would then give the backup to the new CEO, and instruct him on how to search and extract the files he wants. That way if there's any malfeasance going on, you just did what a good IT guy does, and made backups, while the new CEO was the one who went snooping through the backups.



          And, going forward, it's a good idea to get this process enshrined in an official policy - it protects you from any accusations if it's just the normal process, and every now and then, you'll get to be the hero when you can pull the critical files that some ex-employee had on their machine that no one knew they were missing, until they need them, NOW.






          share|improve this answer
















          • 13




            Although I agree that it's a perfectly legitimate request, I disagree that written permission would cause an issue with discretion. The NEW CEO is making this request, I'm sure they could easily hand the tech a document telling him to perform the action without that becoming common knowledge. Even if the new CEO just wrote something in word, printed it out and signed it.
            – NotMe
            Sep 3 '14 at 0:23










          • @ChrisLively Perception, if nothing else. Everyone knows that if you want to keep something a secret, you don't write it down... probably the reason it was issued as a verbal request in the first place, IMO.
            – HopelessN00b
            Sep 3 '14 at 0:46






          • 1




            Thanks for the insight. I agree, the backup is a nice middle ground... get everything instead of targeting this or that. The literal amount of time it takes to do that could be a hurdle though.
            – JoshP
            Sep 3 '14 at 4:11










          • I very much appreciate ALL of the answers here! The insight and advice is exactly what I'd hoped for. I accepted this answer because I believe Hopeless hit the nail on the head with the best course of action, given the moderately awkward, and potentially delicate situation.
            – JoshP
            Sep 3 '14 at 23:41







          • 3




            @BroSlow Instead of going through the data for the CEO, and handing off what's relevant, this gives the data to the CEO and lets him decide what's relevant, which is safer for everyone involved. The company doesn't have an extra set of eyes going over sensitive/confidential data, and the IT guy isn't going to see anything he's not supposed to. Also, this takes something that could be perceived as "snooping" or "unauthorized access" by the IT guy and turns it into part of a sysadmin's normal job duties - backing up the company's important data. If it's not already backed up, it should be.
            – HopelessN00b
            Sep 4 '14 at 4:52














          up vote
          20
          down vote



          accepted










          I have been in this position before, and while it could be something illegal or unethical, it could just as well be a perfectly legitimate request with a legitimate reason.



          When someone in a high access position like this leaves their position, there's often legitimate concern that he/she will destroy company data that they feel entitled to (or want to deny the company), and/or use that company data in their next role to undermine their former employer or for personal gain (think poaching customers, or bringing business relationships with them to the next place). Obviously, making sure this doesn't happen is a matter that must be dealt with discretely, as tipping the person off will only make it happen faster, and generally speaking, no one wants these suspicions to be common knowledge.



          You could ask for written permission... but that would probably conflict with the goal of discretion, and especially if it's a company owned laptop, in the US, that data belongs to the company, not the ex-employee, regardless of his position. So the company's agents (the new CEO) are legally entitled to that data, and allowed to be as discrete or as obvious as they want about getting it.



          My advice to you is that rather than just copying the files requested, is to take a backup of the laptop, with whatever means you have at your disposal and document the request and process. (Disk image, same software you use to backup your servers, scripted robocopy or whatever.) Compared to a targeted copying of important files, backing up an executive's machine when they leave is hard to frame as snooping or unauthorized access, which makes it difficult for you to get thrown under the bus, especially if you keep a written record of what you did when you did it, and at whose request. In this case, you would then give the backup to the new CEO, and instruct him on how to search and extract the files he wants. That way if there's any malfeasance going on, you just did what a good IT guy does, and made backups, while the new CEO was the one who went snooping through the backups.



          And, going forward, it's a good idea to get this process enshrined in an official policy - it protects you from any accusations if it's just the normal process, and every now and then, you'll get to be the hero when you can pull the critical files that some ex-employee had on their machine that no one knew they were missing, until they need them, NOW.






          share|improve this answer
















          • 13




            Although I agree that it's a perfectly legitimate request, I disagree that written permission would cause an issue with discretion. The NEW CEO is making this request, I'm sure they could easily hand the tech a document telling him to perform the action without that becoming common knowledge. Even if the new CEO just wrote something in word, printed it out and signed it.
            – NotMe
            Sep 3 '14 at 0:23










          • @ChrisLively Perception, if nothing else. Everyone knows that if you want to keep something a secret, you don't write it down... probably the reason it was issued as a verbal request in the first place, IMO.
            – HopelessN00b
            Sep 3 '14 at 0:46






          • 1




            Thanks for the insight. I agree, the backup is a nice middle ground... get everything instead of targeting this or that. The literal amount of time it takes to do that could be a hurdle though.
            – JoshP
            Sep 3 '14 at 4:11










          • I very much appreciate ALL of the answers here! The insight and advice is exactly what I'd hoped for. I accepted this answer because I believe Hopeless hit the nail on the head with the best course of action, given the moderately awkward, and potentially delicate situation.
            – JoshP
            Sep 3 '14 at 23:41







          • 3




            @BroSlow Instead of going through the data for the CEO, and handing off what's relevant, this gives the data to the CEO and lets him decide what's relevant, which is safer for everyone involved. The company doesn't have an extra set of eyes going over sensitive/confidential data, and the IT guy isn't going to see anything he's not supposed to. Also, this takes something that could be perceived as "snooping" or "unauthorized access" by the IT guy and turns it into part of a sysadmin's normal job duties - backing up the company's important data. If it's not already backed up, it should be.
            – HopelessN00b
            Sep 4 '14 at 4:52












          up vote
          20
          down vote



          accepted







          up vote
          20
          down vote



          accepted






          I have been in this position before, and while it could be something illegal or unethical, it could just as well be a perfectly legitimate request with a legitimate reason.



          When someone in a high access position like this leaves their position, there's often legitimate concern that he/she will destroy company data that they feel entitled to (or want to deny the company), and/or use that company data in their next role to undermine their former employer or for personal gain (think poaching customers, or bringing business relationships with them to the next place). Obviously, making sure this doesn't happen is a matter that must be dealt with discretely, as tipping the person off will only make it happen faster, and generally speaking, no one wants these suspicions to be common knowledge.



          You could ask for written permission... but that would probably conflict with the goal of discretion, and especially if it's a company owned laptop, in the US, that data belongs to the company, not the ex-employee, regardless of his position. So the company's agents (the new CEO) are legally entitled to that data, and allowed to be as discrete or as obvious as they want about getting it.



          My advice to you is that rather than just copying the files requested, is to take a backup of the laptop, with whatever means you have at your disposal and document the request and process. (Disk image, same software you use to backup your servers, scripted robocopy or whatever.) Compared to a targeted copying of important files, backing up an executive's machine when they leave is hard to frame as snooping or unauthorized access, which makes it difficult for you to get thrown under the bus, especially if you keep a written record of what you did when you did it, and at whose request. In this case, you would then give the backup to the new CEO, and instruct him on how to search and extract the files he wants. That way if there's any malfeasance going on, you just did what a good IT guy does, and made backups, while the new CEO was the one who went snooping through the backups.



          And, going forward, it's a good idea to get this process enshrined in an official policy - it protects you from any accusations if it's just the normal process, and every now and then, you'll get to be the hero when you can pull the critical files that some ex-employee had on their machine that no one knew they were missing, until they need them, NOW.






          share|improve this answer












          I have been in this position before, and while it could be something illegal or unethical, it could just as well be a perfectly legitimate request with a legitimate reason.



          When someone in a high access position like this leaves their position, there's often legitimate concern that he/she will destroy company data that they feel entitled to (or want to deny the company), and/or use that company data in their next role to undermine their former employer or for personal gain (think poaching customers, or bringing business relationships with them to the next place). Obviously, making sure this doesn't happen is a matter that must be dealt with discretely, as tipping the person off will only make it happen faster, and generally speaking, no one wants these suspicions to be common knowledge.



          You could ask for written permission... but that would probably conflict with the goal of discretion, and especially if it's a company owned laptop, in the US, that data belongs to the company, not the ex-employee, regardless of his position. So the company's agents (the new CEO) are legally entitled to that data, and allowed to be as discrete or as obvious as they want about getting it.



          My advice to you is that rather than just copying the files requested, is to take a backup of the laptop, with whatever means you have at your disposal and document the request and process. (Disk image, same software you use to backup your servers, scripted robocopy or whatever.) Compared to a targeted copying of important files, backing up an executive's machine when they leave is hard to frame as snooping or unauthorized access, which makes it difficult for you to get thrown under the bus, especially if you keep a written record of what you did when you did it, and at whose request. In this case, you would then give the backup to the new CEO, and instruct him on how to search and extract the files he wants. That way if there's any malfeasance going on, you just did what a good IT guy does, and made backups, while the new CEO was the one who went snooping through the backups.



          And, going forward, it's a good idea to get this process enshrined in an official policy - it protects you from any accusations if it's just the normal process, and every now and then, you'll get to be the hero when you can pull the critical files that some ex-employee had on their machine that no one knew they were missing, until they need them, NOW.







          share|improve this answer












          share|improve this answer



          share|improve this answer










          answered Sep 2 '14 at 23:38









          HopelessN00b

          9,78041753




          9,78041753







          • 13




            Although I agree that it's a perfectly legitimate request, I disagree that written permission would cause an issue with discretion. The NEW CEO is making this request, I'm sure they could easily hand the tech a document telling him to perform the action without that becoming common knowledge. Even if the new CEO just wrote something in word, printed it out and signed it.
            – NotMe
            Sep 3 '14 at 0:23










          • @ChrisLively Perception, if nothing else. Everyone knows that if you want to keep something a secret, you don't write it down... probably the reason it was issued as a verbal request in the first place, IMO.
            – HopelessN00b
            Sep 3 '14 at 0:46






          • 1




            Thanks for the insight. I agree, the backup is a nice middle ground... get everything instead of targeting this or that. The literal amount of time it takes to do that could be a hurdle though.
            – JoshP
            Sep 3 '14 at 4:11










          • I very much appreciate ALL of the answers here! The insight and advice is exactly what I'd hoped for. I accepted this answer because I believe Hopeless hit the nail on the head with the best course of action, given the moderately awkward, and potentially delicate situation.
            – JoshP
            Sep 3 '14 at 23:41







          • 3




            @BroSlow Instead of going through the data for the CEO, and handing off what's relevant, this gives the data to the CEO and lets him decide what's relevant, which is safer for everyone involved. The company doesn't have an extra set of eyes going over sensitive/confidential data, and the IT guy isn't going to see anything he's not supposed to. Also, this takes something that could be perceived as "snooping" or "unauthorized access" by the IT guy and turns it into part of a sysadmin's normal job duties - backing up the company's important data. If it's not already backed up, it should be.
            – HopelessN00b
            Sep 4 '14 at 4:52












          • 13




            Although I agree that it's a perfectly legitimate request, I disagree that written permission would cause an issue with discretion. The NEW CEO is making this request, I'm sure they could easily hand the tech a document telling him to perform the action without that becoming common knowledge. Even if the new CEO just wrote something in word, printed it out and signed it.
            – NotMe
            Sep 3 '14 at 0:23










          • @ChrisLively Perception, if nothing else. Everyone knows that if you want to keep something a secret, you don't write it down... probably the reason it was issued as a verbal request in the first place, IMO.
            – HopelessN00b
            Sep 3 '14 at 0:46






          • 1




            Thanks for the insight. I agree, the backup is a nice middle ground... get everything instead of targeting this or that. The literal amount of time it takes to do that could be a hurdle though.
            – JoshP
            Sep 3 '14 at 4:11










          • I very much appreciate ALL of the answers here! The insight and advice is exactly what I'd hoped for. I accepted this answer because I believe Hopeless hit the nail on the head with the best course of action, given the moderately awkward, and potentially delicate situation.
            – JoshP
            Sep 3 '14 at 23:41







          • 3




            @BroSlow Instead of going through the data for the CEO, and handing off what's relevant, this gives the data to the CEO and lets him decide what's relevant, which is safer for everyone involved. The company doesn't have an extra set of eyes going over sensitive/confidential data, and the IT guy isn't going to see anything he's not supposed to. Also, this takes something that could be perceived as "snooping" or "unauthorized access" by the IT guy and turns it into part of a sysadmin's normal job duties - backing up the company's important data. If it's not already backed up, it should be.
            – HopelessN00b
            Sep 4 '14 at 4:52







          13




          13




          Although I agree that it's a perfectly legitimate request, I disagree that written permission would cause an issue with discretion. The NEW CEO is making this request, I'm sure they could easily hand the tech a document telling him to perform the action without that becoming common knowledge. Even if the new CEO just wrote something in word, printed it out and signed it.
          – NotMe
          Sep 3 '14 at 0:23




          Although I agree that it's a perfectly legitimate request, I disagree that written permission would cause an issue with discretion. The NEW CEO is making this request, I'm sure they could easily hand the tech a document telling him to perform the action without that becoming common knowledge. Even if the new CEO just wrote something in word, printed it out and signed it.
          – NotMe
          Sep 3 '14 at 0:23












          @ChrisLively Perception, if nothing else. Everyone knows that if you want to keep something a secret, you don't write it down... probably the reason it was issued as a verbal request in the first place, IMO.
          – HopelessN00b
          Sep 3 '14 at 0:46




          @ChrisLively Perception, if nothing else. Everyone knows that if you want to keep something a secret, you don't write it down... probably the reason it was issued as a verbal request in the first place, IMO.
          – HopelessN00b
          Sep 3 '14 at 0:46




          1




          1




          Thanks for the insight. I agree, the backup is a nice middle ground... get everything instead of targeting this or that. The literal amount of time it takes to do that could be a hurdle though.
          – JoshP
          Sep 3 '14 at 4:11




          Thanks for the insight. I agree, the backup is a nice middle ground... get everything instead of targeting this or that. The literal amount of time it takes to do that could be a hurdle though.
          – JoshP
          Sep 3 '14 at 4:11












          I very much appreciate ALL of the answers here! The insight and advice is exactly what I'd hoped for. I accepted this answer because I believe Hopeless hit the nail on the head with the best course of action, given the moderately awkward, and potentially delicate situation.
          – JoshP
          Sep 3 '14 at 23:41





          I very much appreciate ALL of the answers here! The insight and advice is exactly what I'd hoped for. I accepted this answer because I believe Hopeless hit the nail on the head with the best course of action, given the moderately awkward, and potentially delicate situation.
          – JoshP
          Sep 3 '14 at 23:41





          3




          3




          @BroSlow Instead of going through the data for the CEO, and handing off what's relevant, this gives the data to the CEO and lets him decide what's relevant, which is safer for everyone involved. The company doesn't have an extra set of eyes going over sensitive/confidential data, and the IT guy isn't going to see anything he's not supposed to. Also, this takes something that could be perceived as "snooping" or "unauthorized access" by the IT guy and turns it into part of a sysadmin's normal job duties - backing up the company's important data. If it's not already backed up, it should be.
          – HopelessN00b
          Sep 4 '14 at 4:52




          @BroSlow Instead of going through the data for the CEO, and handing off what's relevant, this gives the data to the CEO and lets him decide what's relevant, which is safer for everyone involved. The company doesn't have an extra set of eyes going over sensitive/confidential data, and the IT guy isn't going to see anything he's not supposed to. Also, this takes something that could be perceived as "snooping" or "unauthorized access" by the IT guy and turns it into part of a sysadmin's normal job duties - backing up the company's important data. If it's not already backed up, it should be.
          – HopelessN00b
          Sep 4 '14 at 4:52












          up vote
          66
          down vote













          What a quandary! In the US, a company owns the network and the data transmitted across it. Additionally, if the former CEO's laptop was issued by the company, the company has complete access to it as well. Legally, you should be fine following the direction from you new CEO, but get that direction in writing.



          If you don't get the direction in writing, then your work could be characterized as hacking. Think about it like this: if your company tells you to get the data, it's safe; if you go to get the data on your own, it's a crime. It is very possible that the new CEO is simply curious about the data, and if you are caught and don't have written permission to get the data, he could easily throw you under the bus. In this case, denying he asked you to get the information and then telling the authorities that you committed a hacking crime.



          Now, ethics. If your company's new CEO is asking you to gather the information in a manner that feels wrong, it probably is. When reviewing electronic records, companies usually maintain a chain-of-evidence that starts with the original request for data in writing. Once that is done, the request gets approved by Legal, and then you go to work. The request can be as simple as "get the data" or as explicit as "all e-mails from date a to date b, and install a keylogger". Once you get the data, you treat it as evidence and strictly follow legal's requirements for maintaining the chain of evidence.



          In your case, your new CEO asked you to pull data from the old CEO's laptop in a manner that suggests he doesn't care about the chain-of-evidence. He also asked you to do so in a manner that is dangerous for you if you are caught. I would ask for the request in writing, or not do it all. In fact, if the worst thing happens and he fires you for not getting the information, at least you'll be unemployed and not in jail.






          share|improve this answer


















          • 4




            Thanks for your answer. I'll ask for the direction in writing. I don't think that will be a problem.
            – JoshP
            Sep 2 '14 at 15:26






          • 20




            From a European point of view, the first paragraph is really a surprise. In Europe, an employer can't check a machine of an employee, etc. Only for urgent matters (like the prevention of theft or sharing data with a competitor), this is allowed. Such cases are sometimes settled at the European Court of Human Rights.
            – Willem Van Onsem
            Sep 2 '14 at 18:36







          • 18




            @CommuSoft From a UK standpoint this case sounds illegal under the Data Protection Act, which does take into account EU rights to privacy and correspondence. I imagine a lot of countries have laws against convert unjustified monitoring. I've read up a bit and it looks like, as usual, Americans are going to have to suck it up.
            – Nathan Cooper
            Sep 2 '14 at 19:17






          • 5




            In the U.S., it depends on whether the employee has a reasonable expectation of privacy. Many (if not most) companies explicitly state that employees have no expectation of privacy when using company equipment. This is also almost always true for government employees. Many employers (including the federal government) also go to the length of putting a pop-up message that displays to users at logon warning them of the lack of an expectation of privacy on the machine that they are logging in to.
            – reirab
            Sep 2 '14 at 21:10






          • 3




            In general the advice to get it in writing is solid, however I disagree that this would constitute hacking. The OP appears to be in the Tech department and has access to perform these actions. Provided the company has an employee manual that includes text about no privacy for company computers there's even less of a case. Could you cite any existing cases and/or law to support your supposition? I ask simply because I'd like to know more. The only way I can think of is for the OP to have a legal issue is if the employer decides to bring action which seems incredibly unlikely.
            – NotMe
            Sep 3 '14 at 0:30














          up vote
          66
          down vote













          What a quandary! In the US, a company owns the network and the data transmitted across it. Additionally, if the former CEO's laptop was issued by the company, the company has complete access to it as well. Legally, you should be fine following the direction from you new CEO, but get that direction in writing.



          If you don't get the direction in writing, then your work could be characterized as hacking. Think about it like this: if your company tells you to get the data, it's safe; if you go to get the data on your own, it's a crime. It is very possible that the new CEO is simply curious about the data, and if you are caught and don't have written permission to get the data, he could easily throw you under the bus. In this case, denying he asked you to get the information and then telling the authorities that you committed a hacking crime.



          Now, ethics. If your company's new CEO is asking you to gather the information in a manner that feels wrong, it probably is. When reviewing electronic records, companies usually maintain a chain-of-evidence that starts with the original request for data in writing. Once that is done, the request gets approved by Legal, and then you go to work. The request can be as simple as "get the data" or as explicit as "all e-mails from date a to date b, and install a keylogger". Once you get the data, you treat it as evidence and strictly follow legal's requirements for maintaining the chain of evidence.



          In your case, your new CEO asked you to pull data from the old CEO's laptop in a manner that suggests he doesn't care about the chain-of-evidence. He also asked you to do so in a manner that is dangerous for you if you are caught. I would ask for the request in writing, or not do it all. In fact, if the worst thing happens and he fires you for not getting the information, at least you'll be unemployed and not in jail.






          share|improve this answer


















          • 4




            Thanks for your answer. I'll ask for the direction in writing. I don't think that will be a problem.
            – JoshP
            Sep 2 '14 at 15:26






          • 20




            From a European point of view, the first paragraph is really a surprise. In Europe, an employer can't check a machine of an employee, etc. Only for urgent matters (like the prevention of theft or sharing data with a competitor), this is allowed. Such cases are sometimes settled at the European Court of Human Rights.
            – Willem Van Onsem
            Sep 2 '14 at 18:36







          • 18




            @CommuSoft From a UK standpoint this case sounds illegal under the Data Protection Act, which does take into account EU rights to privacy and correspondence. I imagine a lot of countries have laws against convert unjustified monitoring. I've read up a bit and it looks like, as usual, Americans are going to have to suck it up.
            – Nathan Cooper
            Sep 2 '14 at 19:17






          • 5




            In the U.S., it depends on whether the employee has a reasonable expectation of privacy. Many (if not most) companies explicitly state that employees have no expectation of privacy when using company equipment. This is also almost always true for government employees. Many employers (including the federal government) also go to the length of putting a pop-up message that displays to users at logon warning them of the lack of an expectation of privacy on the machine that they are logging in to.
            – reirab
            Sep 2 '14 at 21:10






          • 3




            In general the advice to get it in writing is solid, however I disagree that this would constitute hacking. The OP appears to be in the Tech department and has access to perform these actions. Provided the company has an employee manual that includes text about no privacy for company computers there's even less of a case. Could you cite any existing cases and/or law to support your supposition? I ask simply because I'd like to know more. The only way I can think of is for the OP to have a legal issue is if the employer decides to bring action which seems incredibly unlikely.
            – NotMe
            Sep 3 '14 at 0:30












          up vote
          66
          down vote










          up vote
          66
          down vote









          What a quandary! In the US, a company owns the network and the data transmitted across it. Additionally, if the former CEO's laptop was issued by the company, the company has complete access to it as well. Legally, you should be fine following the direction from you new CEO, but get that direction in writing.



          If you don't get the direction in writing, then your work could be characterized as hacking. Think about it like this: if your company tells you to get the data, it's safe; if you go to get the data on your own, it's a crime. It is very possible that the new CEO is simply curious about the data, and if you are caught and don't have written permission to get the data, he could easily throw you under the bus. In this case, denying he asked you to get the information and then telling the authorities that you committed a hacking crime.



          Now, ethics. If your company's new CEO is asking you to gather the information in a manner that feels wrong, it probably is. When reviewing electronic records, companies usually maintain a chain-of-evidence that starts with the original request for data in writing. Once that is done, the request gets approved by Legal, and then you go to work. The request can be as simple as "get the data" or as explicit as "all e-mails from date a to date b, and install a keylogger". Once you get the data, you treat it as evidence and strictly follow legal's requirements for maintaining the chain of evidence.



          In your case, your new CEO asked you to pull data from the old CEO's laptop in a manner that suggests he doesn't care about the chain-of-evidence. He also asked you to do so in a manner that is dangerous for you if you are caught. I would ask for the request in writing, or not do it all. In fact, if the worst thing happens and he fires you for not getting the information, at least you'll be unemployed and not in jail.






          share|improve this answer














          What a quandary! In the US, a company owns the network and the data transmitted across it. Additionally, if the former CEO's laptop was issued by the company, the company has complete access to it as well. Legally, you should be fine following the direction from you new CEO, but get that direction in writing.



          If you don't get the direction in writing, then your work could be characterized as hacking. Think about it like this: if your company tells you to get the data, it's safe; if you go to get the data on your own, it's a crime. It is very possible that the new CEO is simply curious about the data, and if you are caught and don't have written permission to get the data, he could easily throw you under the bus. In this case, denying he asked you to get the information and then telling the authorities that you committed a hacking crime.



          Now, ethics. If your company's new CEO is asking you to gather the information in a manner that feels wrong, it probably is. When reviewing electronic records, companies usually maintain a chain-of-evidence that starts with the original request for data in writing. Once that is done, the request gets approved by Legal, and then you go to work. The request can be as simple as "get the data" or as explicit as "all e-mails from date a to date b, and install a keylogger". Once you get the data, you treat it as evidence and strictly follow legal's requirements for maintaining the chain of evidence.



          In your case, your new CEO asked you to pull data from the old CEO's laptop in a manner that suggests he doesn't care about the chain-of-evidence. He also asked you to do so in a manner that is dangerous for you if you are caught. I would ask for the request in writing, or not do it all. In fact, if the worst thing happens and he fires you for not getting the information, at least you'll be unemployed and not in jail.







          share|improve this answer














          share|improve this answer



          share|improve this answer








          edited Sep 3 '14 at 15:46









          Blackhole

          1064




          1064










          answered Sep 2 '14 at 15:20









          Mike Van

          2,82021025




          2,82021025







          • 4




            Thanks for your answer. I'll ask for the direction in writing. I don't think that will be a problem.
            – JoshP
            Sep 2 '14 at 15:26






          • 20




            From a European point of view, the first paragraph is really a surprise. In Europe, an employer can't check a machine of an employee, etc. Only for urgent matters (like the prevention of theft or sharing data with a competitor), this is allowed. Such cases are sometimes settled at the European Court of Human Rights.
            – Willem Van Onsem
            Sep 2 '14 at 18:36







          • 18




            @CommuSoft From a UK standpoint this case sounds illegal under the Data Protection Act, which does take into account EU rights to privacy and correspondence. I imagine a lot of countries have laws against convert unjustified monitoring. I've read up a bit and it looks like, as usual, Americans are going to have to suck it up.
            – Nathan Cooper
            Sep 2 '14 at 19:17






          • 5




            In the U.S., it depends on whether the employee has a reasonable expectation of privacy. Many (if not most) companies explicitly state that employees have no expectation of privacy when using company equipment. This is also almost always true for government employees. Many employers (including the federal government) also go to the length of putting a pop-up message that displays to users at logon warning them of the lack of an expectation of privacy on the machine that they are logging in to.
            – reirab
            Sep 2 '14 at 21:10






          • 3




            In general the advice to get it in writing is solid, however I disagree that this would constitute hacking. The OP appears to be in the Tech department and has access to perform these actions. Provided the company has an employee manual that includes text about no privacy for company computers there's even less of a case. Could you cite any existing cases and/or law to support your supposition? I ask simply because I'd like to know more. The only way I can think of is for the OP to have a legal issue is if the employer decides to bring action which seems incredibly unlikely.
            – NotMe
            Sep 3 '14 at 0:30












          • 4




            Thanks for your answer. I'll ask for the direction in writing. I don't think that will be a problem.
            – JoshP
            Sep 2 '14 at 15:26






          • 20




            From a European point of view, the first paragraph is really a surprise. In Europe, an employer can't check a machine of an employee, etc. Only for urgent matters (like the prevention of theft or sharing data with a competitor), this is allowed. Such cases are sometimes settled at the European Court of Human Rights.
            – Willem Van Onsem
            Sep 2 '14 at 18:36







          • 18




            @CommuSoft From a UK standpoint this case sounds illegal under the Data Protection Act, which does take into account EU rights to privacy and correspondence. I imagine a lot of countries have laws against convert unjustified monitoring. I've read up a bit and it looks like, as usual, Americans are going to have to suck it up.
            – Nathan Cooper
            Sep 2 '14 at 19:17






          • 5




            In the U.S., it depends on whether the employee has a reasonable expectation of privacy. Many (if not most) companies explicitly state that employees have no expectation of privacy when using company equipment. This is also almost always true for government employees. Many employers (including the federal government) also go to the length of putting a pop-up message that displays to users at logon warning them of the lack of an expectation of privacy on the machine that they are logging in to.
            – reirab
            Sep 2 '14 at 21:10






          • 3




            In general the advice to get it in writing is solid, however I disagree that this would constitute hacking. The OP appears to be in the Tech department and has access to perform these actions. Provided the company has an employee manual that includes text about no privacy for company computers there's even less of a case. Could you cite any existing cases and/or law to support your supposition? I ask simply because I'd like to know more. The only way I can think of is for the OP to have a legal issue is if the employer decides to bring action which seems incredibly unlikely.
            – NotMe
            Sep 3 '14 at 0:30







          4




          4




          Thanks for your answer. I'll ask for the direction in writing. I don't think that will be a problem.
          – JoshP
          Sep 2 '14 at 15:26




          Thanks for your answer. I'll ask for the direction in writing. I don't think that will be a problem.
          – JoshP
          Sep 2 '14 at 15:26




          20




          20




          From a European point of view, the first paragraph is really a surprise. In Europe, an employer can't check a machine of an employee, etc. Only for urgent matters (like the prevention of theft or sharing data with a competitor), this is allowed. Such cases are sometimes settled at the European Court of Human Rights.
          – Willem Van Onsem
          Sep 2 '14 at 18:36





          From a European point of view, the first paragraph is really a surprise. In Europe, an employer can't check a machine of an employee, etc. Only for urgent matters (like the prevention of theft or sharing data with a competitor), this is allowed. Such cases are sometimes settled at the European Court of Human Rights.
          – Willem Van Onsem
          Sep 2 '14 at 18:36





          18




          18




          @CommuSoft From a UK standpoint this case sounds illegal under the Data Protection Act, which does take into account EU rights to privacy and correspondence. I imagine a lot of countries have laws against convert unjustified monitoring. I've read up a bit and it looks like, as usual, Americans are going to have to suck it up.
          – Nathan Cooper
          Sep 2 '14 at 19:17




          @CommuSoft From a UK standpoint this case sounds illegal under the Data Protection Act, which does take into account EU rights to privacy and correspondence. I imagine a lot of countries have laws against convert unjustified monitoring. I've read up a bit and it looks like, as usual, Americans are going to have to suck it up.
          – Nathan Cooper
          Sep 2 '14 at 19:17




          5




          5




          In the U.S., it depends on whether the employee has a reasonable expectation of privacy. Many (if not most) companies explicitly state that employees have no expectation of privacy when using company equipment. This is also almost always true for government employees. Many employers (including the federal government) also go to the length of putting a pop-up message that displays to users at logon warning them of the lack of an expectation of privacy on the machine that they are logging in to.
          – reirab
          Sep 2 '14 at 21:10




          In the U.S., it depends on whether the employee has a reasonable expectation of privacy. Many (if not most) companies explicitly state that employees have no expectation of privacy when using company equipment. This is also almost always true for government employees. Many employers (including the federal government) also go to the length of putting a pop-up message that displays to users at logon warning them of the lack of an expectation of privacy on the machine that they are logging in to.
          – reirab
          Sep 2 '14 at 21:10




          3




          3




          In general the advice to get it in writing is solid, however I disagree that this would constitute hacking. The OP appears to be in the Tech department and has access to perform these actions. Provided the company has an employee manual that includes text about no privacy for company computers there's even less of a case. Could you cite any existing cases and/or law to support your supposition? I ask simply because I'd like to know more. The only way I can think of is for the OP to have a legal issue is if the employer decides to bring action which seems incredibly unlikely.
          – NotMe
          Sep 3 '14 at 0:30




          In general the advice to get it in writing is solid, however I disagree that this would constitute hacking. The OP appears to be in the Tech department and has access to perform these actions. Provided the company has an employee manual that includes text about no privacy for company computers there's even less of a case. Could you cite any existing cases and/or law to support your supposition? I ask simply because I'd like to know more. The only way I can think of is for the OP to have a legal issue is if the employer decides to bring action which seems incredibly unlikely.
          – NotMe
          Sep 3 '14 at 0:30










          up vote
          7
          down vote













          Who owns the former CEO's laptop? If it's a corporate laptop then the documents on it are also the property of the company, assuming your legal team were sober when they wrote/reviewed your acceptable use policy.



          It might not be pleasant to have to sneak around to do this but it's certainly not a legal issue, and possibly not even an ethical one.






          share|improve this answer
















          • 1




            Thanks for your answer. I've certainly had the suspicion like in the second bullet point above.
            – JoshP
            Sep 2 '14 at 15:04










          • Who knows? Maybe the whole team was drunk :D
            – MadTux
            Sep 2 '14 at 17:51










          • @JoshP The question is: is this your former CEO former laptop or the current one?
            – Pierre Arlaud
            Sep 3 '14 at 8:33










          • Well, the OPs boss may be simply ashamed that they don't have the copy of the important documents that ex-CEO had on their laptop. As careless as it is to behave as trains would not exist, this happens...
            – user1023
            Sep 3 '14 at 9:55










          • @PierreArlaud, former CEO's (still current employee's) current laptop.
            – JoshP
            Sep 3 '14 at 20:41














          up vote
          7
          down vote













          Who owns the former CEO's laptop? If it's a corporate laptop then the documents on it are also the property of the company, assuming your legal team were sober when they wrote/reviewed your acceptable use policy.



          It might not be pleasant to have to sneak around to do this but it's certainly not a legal issue, and possibly not even an ethical one.






          share|improve this answer
















          • 1




            Thanks for your answer. I've certainly had the suspicion like in the second bullet point above.
            – JoshP
            Sep 2 '14 at 15:04










          • Who knows? Maybe the whole team was drunk :D
            – MadTux
            Sep 2 '14 at 17:51










          • @JoshP The question is: is this your former CEO former laptop or the current one?
            – Pierre Arlaud
            Sep 3 '14 at 8:33










          • Well, the OPs boss may be simply ashamed that they don't have the copy of the important documents that ex-CEO had on their laptop. As careless as it is to behave as trains would not exist, this happens...
            – user1023
            Sep 3 '14 at 9:55










          • @PierreArlaud, former CEO's (still current employee's) current laptop.
            – JoshP
            Sep 3 '14 at 20:41












          up vote
          7
          down vote










          up vote
          7
          down vote









          Who owns the former CEO's laptop? If it's a corporate laptop then the documents on it are also the property of the company, assuming your legal team were sober when they wrote/reviewed your acceptable use policy.



          It might not be pleasant to have to sneak around to do this but it's certainly not a legal issue, and possibly not even an ethical one.






          share|improve this answer












          Who owns the former CEO's laptop? If it's a corporate laptop then the documents on it are also the property of the company, assuming your legal team were sober when they wrote/reviewed your acceptable use policy.



          It might not be pleasant to have to sneak around to do this but it's certainly not a legal issue, and possibly not even an ethical one.







          share|improve this answer












          share|improve this answer



          share|improve this answer










          answered Sep 2 '14 at 14:55









          Rob Moir

          4,43311633




          4,43311633







          • 1




            Thanks for your answer. I've certainly had the suspicion like in the second bullet point above.
            – JoshP
            Sep 2 '14 at 15:04










          • Who knows? Maybe the whole team was drunk :D
            – MadTux
            Sep 2 '14 at 17:51










          • @JoshP The question is: is this your former CEO former laptop or the current one?
            – Pierre Arlaud
            Sep 3 '14 at 8:33










          • Well, the OPs boss may be simply ashamed that they don't have the copy of the important documents that ex-CEO had on their laptop. As careless as it is to behave as trains would not exist, this happens...
            – user1023
            Sep 3 '14 at 9:55










          • @PierreArlaud, former CEO's (still current employee's) current laptop.
            – JoshP
            Sep 3 '14 at 20:41












          • 1




            Thanks for your answer. I've certainly had the suspicion like in the second bullet point above.
            – JoshP
            Sep 2 '14 at 15:04










          • Who knows? Maybe the whole team was drunk :D
            – MadTux
            Sep 2 '14 at 17:51










          • @JoshP The question is: is this your former CEO former laptop or the current one?
            – Pierre Arlaud
            Sep 3 '14 at 8:33










          • Well, the OPs boss may be simply ashamed that they don't have the copy of the important documents that ex-CEO had on their laptop. As careless as it is to behave as trains would not exist, this happens...
            – user1023
            Sep 3 '14 at 9:55










          • @PierreArlaud, former CEO's (still current employee's) current laptop.
            – JoshP
            Sep 3 '14 at 20:41







          1




          1




          Thanks for your answer. I've certainly had the suspicion like in the second bullet point above.
          – JoshP
          Sep 2 '14 at 15:04




          Thanks for your answer. I've certainly had the suspicion like in the second bullet point above.
          – JoshP
          Sep 2 '14 at 15:04












          Who knows? Maybe the whole team was drunk :D
          – MadTux
          Sep 2 '14 at 17:51




          Who knows? Maybe the whole team was drunk :D
          – MadTux
          Sep 2 '14 at 17:51












          @JoshP The question is: is this your former CEO former laptop or the current one?
          – Pierre Arlaud
          Sep 3 '14 at 8:33




          @JoshP The question is: is this your former CEO former laptop or the current one?
          – Pierre Arlaud
          Sep 3 '14 at 8:33












          Well, the OPs boss may be simply ashamed that they don't have the copy of the important documents that ex-CEO had on their laptop. As careless as it is to behave as trains would not exist, this happens...
          – user1023
          Sep 3 '14 at 9:55




          Well, the OPs boss may be simply ashamed that they don't have the copy of the important documents that ex-CEO had on their laptop. As careless as it is to behave as trains would not exist, this happens...
          – user1023
          Sep 3 '14 at 9:55












          @PierreArlaud, former CEO's (still current employee's) current laptop.
          – JoshP
          Sep 3 '14 at 20:41




          @PierreArlaud, former CEO's (still current employee's) current laptop.
          – JoshP
          Sep 3 '14 at 20:41










          up vote
          3
          down vote













          1. You need to determine whether this is an official request to surreptitiously copy these docs from the CEO's laptop, or a surreptitious request to surreptitiously copy these docs from the CEO's laptop. Paper trail, please. You don't want to experience the equivalent of the standard "Mission: Impossible" tape recording: "... in the event of your death or capture, the Secretary of Defense will disavow any knowledge of your actions ..." In sum: the request must be official, and it must be in writing.


          2. You need to determine whether the CEO's laptop is the property of the company or the property of the CEO. The official request for your action must either specify that the laptop is the company's property or that the laptop is the CEO's property but the company has implicit permission to access it.


          If both of these conditions are not met, the new CEO's request is a "no-go" as far as I am concerned, if I were in your position.



          My answer is based on the presumption that you work in the US.






          share|improve this answer


























            up vote
            3
            down vote













            1. You need to determine whether this is an official request to surreptitiously copy these docs from the CEO's laptop, or a surreptitious request to surreptitiously copy these docs from the CEO's laptop. Paper trail, please. You don't want to experience the equivalent of the standard "Mission: Impossible" tape recording: "... in the event of your death or capture, the Secretary of Defense will disavow any knowledge of your actions ..." In sum: the request must be official, and it must be in writing.


            2. You need to determine whether the CEO's laptop is the property of the company or the property of the CEO. The official request for your action must either specify that the laptop is the company's property or that the laptop is the CEO's property but the company has implicit permission to access it.


            If both of these conditions are not met, the new CEO's request is a "no-go" as far as I am concerned, if I were in your position.



            My answer is based on the presumption that you work in the US.






            share|improve this answer
























              up vote
              3
              down vote










              up vote
              3
              down vote









              1. You need to determine whether this is an official request to surreptitiously copy these docs from the CEO's laptop, or a surreptitious request to surreptitiously copy these docs from the CEO's laptop. Paper trail, please. You don't want to experience the equivalent of the standard "Mission: Impossible" tape recording: "... in the event of your death or capture, the Secretary of Defense will disavow any knowledge of your actions ..." In sum: the request must be official, and it must be in writing.


              2. You need to determine whether the CEO's laptop is the property of the company or the property of the CEO. The official request for your action must either specify that the laptop is the company's property or that the laptop is the CEO's property but the company has implicit permission to access it.


              If both of these conditions are not met, the new CEO's request is a "no-go" as far as I am concerned, if I were in your position.



              My answer is based on the presumption that you work in the US.






              share|improve this answer














              1. You need to determine whether this is an official request to surreptitiously copy these docs from the CEO's laptop, or a surreptitious request to surreptitiously copy these docs from the CEO's laptop. Paper trail, please. You don't want to experience the equivalent of the standard "Mission: Impossible" tape recording: "... in the event of your death or capture, the Secretary of Defense will disavow any knowledge of your actions ..." In sum: the request must be official, and it must be in writing.


              2. You need to determine whether the CEO's laptop is the property of the company or the property of the CEO. The official request for your action must either specify that the laptop is the company's property or that the laptop is the CEO's property but the company has implicit permission to access it.


              If both of these conditions are not met, the new CEO's request is a "no-go" as far as I am concerned, if I were in your position.



              My answer is based on the presumption that you work in the US.







              share|improve this answer














              share|improve this answer



              share|improve this answer








              edited Sep 2 '14 at 22:10

























              answered Sep 2 '14 at 17:01









              Vietnhi Phuvan

              68.9k7118254




              68.9k7118254




















                  up vote
                  2
                  down vote













                  You need to get the request in writing. If this request were above-board, you'd have it already.



                  [US] Company hardware and the files contained therein are still company property and they are entitled to the data, but there are less-shady ways to exercise this right. The situation you're describing sounds personal-- if it were a legal matter, your firm or the DA would have hired professional forensic technicians to fulfill this request instead of coming to you secretly. If you even turn on that laptop, the evidence is tainted and will be thrown out in court.



                  Either way, it's none of your business why he's asking. It's only your business how he's doing it.



                  Write to him instead, mentioning "per your request to retrieve files from _'s laptop, if this is a legal matter, the evidence will be inadmissible..." and try to coax authorization out of him that way.



                  He's not going to admit to wanting to snoop on former employees' personal data, so at the very least you can protect both of you by asking him to make a formal request of you to do something broad like "please make a backup image of the ex-CEO's laptop for archival's sake/to comply with our official corporate document retention policy." He can pick through it at his leisure to find whatever he needs, and you can disavow any knowledge of the contents.



                  Don't ask, don't tell, but insist on a paper trail. When this ends with him posting intimate photos of the ex-CEO's wife on 4chan, when it comes back to you (and it will), you'll have a paper trail showing his request and the subsequent chain of custody and be able to make a case for plausible deniability.






                  share|improve this answer
























                    up vote
                    2
                    down vote













                    You need to get the request in writing. If this request were above-board, you'd have it already.



                    [US] Company hardware and the files contained therein are still company property and they are entitled to the data, but there are less-shady ways to exercise this right. The situation you're describing sounds personal-- if it were a legal matter, your firm or the DA would have hired professional forensic technicians to fulfill this request instead of coming to you secretly. If you even turn on that laptop, the evidence is tainted and will be thrown out in court.



                    Either way, it's none of your business why he's asking. It's only your business how he's doing it.



                    Write to him instead, mentioning "per your request to retrieve files from _'s laptop, if this is a legal matter, the evidence will be inadmissible..." and try to coax authorization out of him that way.



                    He's not going to admit to wanting to snoop on former employees' personal data, so at the very least you can protect both of you by asking him to make a formal request of you to do something broad like "please make a backup image of the ex-CEO's laptop for archival's sake/to comply with our official corporate document retention policy." He can pick through it at his leisure to find whatever he needs, and you can disavow any knowledge of the contents.



                    Don't ask, don't tell, but insist on a paper trail. When this ends with him posting intimate photos of the ex-CEO's wife on 4chan, when it comes back to you (and it will), you'll have a paper trail showing his request and the subsequent chain of custody and be able to make a case for plausible deniability.






                    share|improve this answer






















                      up vote
                      2
                      down vote










                      up vote
                      2
                      down vote









                      You need to get the request in writing. If this request were above-board, you'd have it already.



                      [US] Company hardware and the files contained therein are still company property and they are entitled to the data, but there are less-shady ways to exercise this right. The situation you're describing sounds personal-- if it were a legal matter, your firm or the DA would have hired professional forensic technicians to fulfill this request instead of coming to you secretly. If you even turn on that laptop, the evidence is tainted and will be thrown out in court.



                      Either way, it's none of your business why he's asking. It's only your business how he's doing it.



                      Write to him instead, mentioning "per your request to retrieve files from _'s laptop, if this is a legal matter, the evidence will be inadmissible..." and try to coax authorization out of him that way.



                      He's not going to admit to wanting to snoop on former employees' personal data, so at the very least you can protect both of you by asking him to make a formal request of you to do something broad like "please make a backup image of the ex-CEO's laptop for archival's sake/to comply with our official corporate document retention policy." He can pick through it at his leisure to find whatever he needs, and you can disavow any knowledge of the contents.



                      Don't ask, don't tell, but insist on a paper trail. When this ends with him posting intimate photos of the ex-CEO's wife on 4chan, when it comes back to you (and it will), you'll have a paper trail showing his request and the subsequent chain of custody and be able to make a case for plausible deniability.






                      share|improve this answer












                      You need to get the request in writing. If this request were above-board, you'd have it already.



                      [US] Company hardware and the files contained therein are still company property and they are entitled to the data, but there are less-shady ways to exercise this right. The situation you're describing sounds personal-- if it were a legal matter, your firm or the DA would have hired professional forensic technicians to fulfill this request instead of coming to you secretly. If you even turn on that laptop, the evidence is tainted and will be thrown out in court.



                      Either way, it's none of your business why he's asking. It's only your business how he's doing it.



                      Write to him instead, mentioning "per your request to retrieve files from _'s laptop, if this is a legal matter, the evidence will be inadmissible..." and try to coax authorization out of him that way.



                      He's not going to admit to wanting to snoop on former employees' personal data, so at the very least you can protect both of you by asking him to make a formal request of you to do something broad like "please make a backup image of the ex-CEO's laptop for archival's sake/to comply with our official corporate document retention policy." He can pick through it at his leisure to find whatever he needs, and you can disavow any knowledge of the contents.



                      Don't ask, don't tell, but insist on a paper trail. When this ends with him posting intimate photos of the ex-CEO's wife on 4chan, when it comes back to you (and it will), you'll have a paper trail showing his request and the subsequent chain of custody and be able to make a case for plausible deniability.







                      share|improve this answer












                      share|improve this answer



                      share|improve this answer










                      answered Sep 3 '14 at 15:41









                      Ivan

                      55738




                      55738




















                          up vote
                          1
                          down vote













                          Seconding the motion. If it's a company laptop, policy is almost certainly that the company has the right to read anything on that machine. However, you do want this directive in writing, to make clear that you are doing it on behalf of the company, as directed by management, rather than on your own. If in any doubt, ask if you can get the blessing of the legal department (without mentioning who the target is, just a hypothetical employee). Legal may also have advice on what tools you can and can't safely use, and what files you should particularly avoid looking at.



                          If it's the employee's personally owned machine, that's a different kettle of worms and you probably want the legal department to confirm that, by using it for company business, the employee has granted the company the right to retrieve this data. Getting the order in writing will probably protect you, but on this version I'd play it safe.






                          share|improve this answer
























                            up vote
                            1
                            down vote













                            Seconding the motion. If it's a company laptop, policy is almost certainly that the company has the right to read anything on that machine. However, you do want this directive in writing, to make clear that you are doing it on behalf of the company, as directed by management, rather than on your own. If in any doubt, ask if you can get the blessing of the legal department (without mentioning who the target is, just a hypothetical employee). Legal may also have advice on what tools you can and can't safely use, and what files you should particularly avoid looking at.



                            If it's the employee's personally owned machine, that's a different kettle of worms and you probably want the legal department to confirm that, by using it for company business, the employee has granted the company the right to retrieve this data. Getting the order in writing will probably protect you, but on this version I'd play it safe.






                            share|improve this answer






















                              up vote
                              1
                              down vote










                              up vote
                              1
                              down vote









                              Seconding the motion. If it's a company laptop, policy is almost certainly that the company has the right to read anything on that machine. However, you do want this directive in writing, to make clear that you are doing it on behalf of the company, as directed by management, rather than on your own. If in any doubt, ask if you can get the blessing of the legal department (without mentioning who the target is, just a hypothetical employee). Legal may also have advice on what tools you can and can't safely use, and what files you should particularly avoid looking at.



                              If it's the employee's personally owned machine, that's a different kettle of worms and you probably want the legal department to confirm that, by using it for company business, the employee has granted the company the right to retrieve this data. Getting the order in writing will probably protect you, but on this version I'd play it safe.






                              share|improve this answer












                              Seconding the motion. If it's a company laptop, policy is almost certainly that the company has the right to read anything on that machine. However, you do want this directive in writing, to make clear that you are doing it on behalf of the company, as directed by management, rather than on your own. If in any doubt, ask if you can get the blessing of the legal department (without mentioning who the target is, just a hypothetical employee). Legal may also have advice on what tools you can and can't safely use, and what files you should particularly avoid looking at.



                              If it's the employee's personally owned machine, that's a different kettle of worms and you probably want the legal department to confirm that, by using it for company business, the employee has granted the company the right to retrieve this data. Getting the order in writing will probably protect you, but on this version I'd play it safe.







                              share|improve this answer












                              share|improve this answer



                              share|improve this answer










                              answered Sep 2 '14 at 17:03









                              keshlam

                              41.5k1267144




                              41.5k1267144




















                                  up vote
                                  -1
                                  down vote













                                  If your boss asks you to do a full backup of the company pc, you do a full backup of the company pc. If there is no written document about it, your boss probably did not ask you. ;)



                                  Simple as that, just ask him for it, he is probably fine with signing it, but like most people just not aware of the potential risks he puts you in.



                                  The "full backup" might prevent you from snooping around and leaving timestamps on files, and so on. Not sure how that works.






                                  share|improve this answer
























                                    up vote
                                    -1
                                    down vote













                                    If your boss asks you to do a full backup of the company pc, you do a full backup of the company pc. If there is no written document about it, your boss probably did not ask you. ;)



                                    Simple as that, just ask him for it, he is probably fine with signing it, but like most people just not aware of the potential risks he puts you in.



                                    The "full backup" might prevent you from snooping around and leaving timestamps on files, and so on. Not sure how that works.






                                    share|improve this answer






















                                      up vote
                                      -1
                                      down vote










                                      up vote
                                      -1
                                      down vote









                                      If your boss asks you to do a full backup of the company pc, you do a full backup of the company pc. If there is no written document about it, your boss probably did not ask you. ;)



                                      Simple as that, just ask him for it, he is probably fine with signing it, but like most people just not aware of the potential risks he puts you in.



                                      The "full backup" might prevent you from snooping around and leaving timestamps on files, and so on. Not sure how that works.






                                      share|improve this answer












                                      If your boss asks you to do a full backup of the company pc, you do a full backup of the company pc. If there is no written document about it, your boss probably did not ask you. ;)



                                      Simple as that, just ask him for it, he is probably fine with signing it, but like most people just not aware of the potential risks he puts you in.



                                      The "full backup" might prevent you from snooping around and leaving timestamps on files, and so on. Not sure how that works.







                                      share|improve this answer












                                      share|improve this answer



                                      share|improve this answer










                                      answered Sep 2 '14 at 17:52









                                      user26701

                                      151




                                      151




















                                          up vote
                                          -4
                                          down vote













                                          Do it, and do it quietly.



                                          This sort of request could very well be the corporation gathering details and preserving information in the event of either a lawsuit against the company from the CEO, or a lawsuit against the company due to shareholder and or other financial fraud. It could very well be coming from the legal company to your boss and he or she might himself or herself be under the very same call for discretion. It is better to do it, and keep a low profile about it, then it is to appear to be dragging your feet on behalf of a CEO who is on his or her way out due to reasons that you may not know.






                                          share|improve this answer
















                                          • 4




                                            You're recommending a course of action based on nothing more solid than your unrestrained speculation. That's unacceptable as an answer.
                                            – Vietnhi Phuvan
                                            Sep 3 '14 at 6:09










                                          • I used to work doing IT support to aid in the discovery of class action lawsuits involving major fortune 500 companies. I know something about how these things go. By NOT getting the data, and leaving a paper trail essentially documenting it, he's tipping off the CEO and that could actually get him in trouble. But hey, if you think he should get put on the stand and have his career picked about by lawyers, go right ahead.
                                            – TJ Bandrowsky
                                            Sep 3 '14 at 15:15










                                          • All management requests to me must be done through the proper channels and in the right way. I could just walk up, right off the street, as a total stranger to the OP and ask him to sneak around and get the ex-CEO's data, using your exact speculative rationale.
                                            – Vietnhi Phuvan
                                            Sep 3 '14 at 15:23











                                          • @VietnhiPhuvan That's a bad example; it's the CEO who made the request.
                                            – bye
                                            Sep 3 '14 at 16:23











                                          • @Poldie I was addressing my previous comment to TJBandrowsky. I don't know what you mean by "bad example" Any request that goes to me has to be AAA - authenticated, authorized, and accounted for. Otherwise, the requesters can sit on their hands and twiddle their thumbs while I expedite their request -into the trash can.
                                            – Vietnhi Phuvan
                                            Sep 3 '14 at 16:29















                                          up vote
                                          -4
                                          down vote













                                          Do it, and do it quietly.



                                          This sort of request could very well be the corporation gathering details and preserving information in the event of either a lawsuit against the company from the CEO, or a lawsuit against the company due to shareholder and or other financial fraud. It could very well be coming from the legal company to your boss and he or she might himself or herself be under the very same call for discretion. It is better to do it, and keep a low profile about it, then it is to appear to be dragging your feet on behalf of a CEO who is on his or her way out due to reasons that you may not know.






                                          share|improve this answer
















                                          • 4




                                            You're recommending a course of action based on nothing more solid than your unrestrained speculation. That's unacceptable as an answer.
                                            – Vietnhi Phuvan
                                            Sep 3 '14 at 6:09










                                          • I used to work doing IT support to aid in the discovery of class action lawsuits involving major fortune 500 companies. I know something about how these things go. By NOT getting the data, and leaving a paper trail essentially documenting it, he's tipping off the CEO and that could actually get him in trouble. But hey, if you think he should get put on the stand and have his career picked about by lawyers, go right ahead.
                                            – TJ Bandrowsky
                                            Sep 3 '14 at 15:15










                                          • All management requests to me must be done through the proper channels and in the right way. I could just walk up, right off the street, as a total stranger to the OP and ask him to sneak around and get the ex-CEO's data, using your exact speculative rationale.
                                            – Vietnhi Phuvan
                                            Sep 3 '14 at 15:23











                                          • @VietnhiPhuvan That's a bad example; it's the CEO who made the request.
                                            – bye
                                            Sep 3 '14 at 16:23











                                          • @Poldie I was addressing my previous comment to TJBandrowsky. I don't know what you mean by "bad example" Any request that goes to me has to be AAA - authenticated, authorized, and accounted for. Otherwise, the requesters can sit on their hands and twiddle their thumbs while I expedite their request -into the trash can.
                                            – Vietnhi Phuvan
                                            Sep 3 '14 at 16:29













                                          up vote
                                          -4
                                          down vote










                                          up vote
                                          -4
                                          down vote









                                          Do it, and do it quietly.



                                          This sort of request could very well be the corporation gathering details and preserving information in the event of either a lawsuit against the company from the CEO, or a lawsuit against the company due to shareholder and or other financial fraud. It could very well be coming from the legal company to your boss and he or she might himself or herself be under the very same call for discretion. It is better to do it, and keep a low profile about it, then it is to appear to be dragging your feet on behalf of a CEO who is on his or her way out due to reasons that you may not know.






                                          share|improve this answer












                                          Do it, and do it quietly.



                                          This sort of request could very well be the corporation gathering details and preserving information in the event of either a lawsuit against the company from the CEO, or a lawsuit against the company due to shareholder and or other financial fraud. It could very well be coming from the legal company to your boss and he or she might himself or herself be under the very same call for discretion. It is better to do it, and keep a low profile about it, then it is to appear to be dragging your feet on behalf of a CEO who is on his or her way out due to reasons that you may not know.







                                          share|improve this answer












                                          share|improve this answer



                                          share|improve this answer










                                          answered Sep 3 '14 at 1:46









                                          TJ Bandrowsky

                                          1091




                                          1091







                                          • 4




                                            You're recommending a course of action based on nothing more solid than your unrestrained speculation. That's unacceptable as an answer.
                                            – Vietnhi Phuvan
                                            Sep 3 '14 at 6:09










                                          • I used to work doing IT support to aid in the discovery of class action lawsuits involving major fortune 500 companies. I know something about how these things go. By NOT getting the data, and leaving a paper trail essentially documenting it, he's tipping off the CEO and that could actually get him in trouble. But hey, if you think he should get put on the stand and have his career picked about by lawyers, go right ahead.
                                            – TJ Bandrowsky
                                            Sep 3 '14 at 15:15










                                          • All management requests to me must be done through the proper channels and in the right way. I could just walk up, right off the street, as a total stranger to the OP and ask him to sneak around and get the ex-CEO's data, using your exact speculative rationale.
                                            – Vietnhi Phuvan
                                            Sep 3 '14 at 15:23











                                          • @VietnhiPhuvan That's a bad example; it's the CEO who made the request.
                                            – bye
                                            Sep 3 '14 at 16:23











                                          • @Poldie I was addressing my previous comment to TJBandrowsky. I don't know what you mean by "bad example" Any request that goes to me has to be AAA - authenticated, authorized, and accounted for. Otherwise, the requesters can sit on their hands and twiddle their thumbs while I expedite their request -into the trash can.
                                            – Vietnhi Phuvan
                                            Sep 3 '14 at 16:29













                                          • 4




                                            You're recommending a course of action based on nothing more solid than your unrestrained speculation. That's unacceptable as an answer.
                                            – Vietnhi Phuvan
                                            Sep 3 '14 at 6:09










                                          • I used to work doing IT support to aid in the discovery of class action lawsuits involving major fortune 500 companies. I know something about how these things go. By NOT getting the data, and leaving a paper trail essentially documenting it, he's tipping off the CEO and that could actually get him in trouble. But hey, if you think he should get put on the stand and have his career picked about by lawyers, go right ahead.
                                            – TJ Bandrowsky
                                            Sep 3 '14 at 15:15










                                          • All management requests to me must be done through the proper channels and in the right way. I could just walk up, right off the street, as a total stranger to the OP and ask him to sneak around and get the ex-CEO's data, using your exact speculative rationale.
                                            – Vietnhi Phuvan
                                            Sep 3 '14 at 15:23











                                          • @VietnhiPhuvan That's a bad example; it's the CEO who made the request.
                                            – bye
                                            Sep 3 '14 at 16:23











                                          • @Poldie I was addressing my previous comment to TJBandrowsky. I don't know what you mean by "bad example" Any request that goes to me has to be AAA - authenticated, authorized, and accounted for. Otherwise, the requesters can sit on their hands and twiddle their thumbs while I expedite their request -into the trash can.
                                            – Vietnhi Phuvan
                                            Sep 3 '14 at 16:29








                                          4




                                          4




                                          You're recommending a course of action based on nothing more solid than your unrestrained speculation. That's unacceptable as an answer.
                                          – Vietnhi Phuvan
                                          Sep 3 '14 at 6:09




                                          You're recommending a course of action based on nothing more solid than your unrestrained speculation. That's unacceptable as an answer.
                                          – Vietnhi Phuvan
                                          Sep 3 '14 at 6:09












                                          I used to work doing IT support to aid in the discovery of class action lawsuits involving major fortune 500 companies. I know something about how these things go. By NOT getting the data, and leaving a paper trail essentially documenting it, he's tipping off the CEO and that could actually get him in trouble. But hey, if you think he should get put on the stand and have his career picked about by lawyers, go right ahead.
                                          – TJ Bandrowsky
                                          Sep 3 '14 at 15:15




                                          I used to work doing IT support to aid in the discovery of class action lawsuits involving major fortune 500 companies. I know something about how these things go. By NOT getting the data, and leaving a paper trail essentially documenting it, he's tipping off the CEO and that could actually get him in trouble. But hey, if you think he should get put on the stand and have his career picked about by lawyers, go right ahead.
                                          – TJ Bandrowsky
                                          Sep 3 '14 at 15:15












                                          All management requests to me must be done through the proper channels and in the right way. I could just walk up, right off the street, as a total stranger to the OP and ask him to sneak around and get the ex-CEO's data, using your exact speculative rationale.
                                          – Vietnhi Phuvan
                                          Sep 3 '14 at 15:23





                                          All management requests to me must be done through the proper channels and in the right way. I could just walk up, right off the street, as a total stranger to the OP and ask him to sneak around and get the ex-CEO's data, using your exact speculative rationale.
                                          – Vietnhi Phuvan
                                          Sep 3 '14 at 15:23













                                          @VietnhiPhuvan That's a bad example; it's the CEO who made the request.
                                          – bye
                                          Sep 3 '14 at 16:23





                                          @VietnhiPhuvan That's a bad example; it's the CEO who made the request.
                                          – bye
                                          Sep 3 '14 at 16:23













                                          @Poldie I was addressing my previous comment to TJBandrowsky. I don't know what you mean by "bad example" Any request that goes to me has to be AAA - authenticated, authorized, and accounted for. Otherwise, the requesters can sit on their hands and twiddle their thumbs while I expedite their request -into the trash can.
                                          – Vietnhi Phuvan
                                          Sep 3 '14 at 16:29





                                          @Poldie I was addressing my previous comment to TJBandrowsky. I don't know what you mean by "bad example" Any request that goes to me has to be AAA - authenticated, authorized, and accounted for. Otherwise, the requesters can sit on their hands and twiddle their thumbs while I expedite their request -into the trash can.
                                          – Vietnhi Phuvan
                                          Sep 3 '14 at 16:29






                                          protected by Community♦ Sep 3 '14 at 15:41



                                          Thank you for your interest in this question.
                                          Because it has attracted low-quality or spam answers that had to be removed, posting an answer now requires 10 reputation on this site (the association bonus does not count).



                                          Would you like to answer one of these unanswered questions instead?


                                          Comments

                                          Popular posts from this blog

                                          What does second last employer means? [closed]

                                          List of Gilmore Girls characters

                                          Confectionery