I am doing some research on NIDS systems
and i am starting to wonder about the legal aspects of a NIDS. Sweden where I'm from seems not to have a clear law about what is legal to check and what not.
Ex You can put a rule set to check if people are surfing porn sites okay maybe that is against office policy so we inform them to stop but where do we draw the line here. What if we would make a rule set for that check's for sentences like i hate my boss or information about a employee that is thinking about leaving the company. My point is that with a NIDS you can keep much better track of a person than just checking his mail with a mail filter.
because these is is a global problem i am wondering what different company's and countries say about this issue.