Records, Consent, and the Overbroad Request
An employer suspects an employee of stealing inventory and hires investigator Owen. The employer wants Owen to obtain the employee's personal bank statements, text messages, and location history to 'prove it.' The employer says the employee signed a handbook acknowledgment allowing company monitoring. Owen reviews the acknowledgment and finds it covers company devices, company email, and workplace video, but says nothing about personal bank accounts, personal phones, or location tracking off-duty. Owen also considers interviewing coworkers and reviewing the company's own inventory and access logs.
1. How far does the handbook acknowledgment get Owen? Analyze which requested items are within scope and which are not.
Read the worked answer
The acknowledgment supports monitoring of company devices, company email, and workplace video only. It does not reach the employee's personal bank statements, personal text messages, or off-duty location history. Consent to workplace monitoring is not blanket consent to personal financial and communications data. Obtaining bank statements without the employee's consent or lawful process would be improper, and accessing personal texts or location data raises serious privacy and possibly criminal exposure. Owen should explain the scope limit to the employer, decline the out-of-scope items, and propose lawful alternatives: the company's own access logs, inventory records, video, and witness interviews. If bank records are genuinely needed, the employer should pursue them through counsel and lawful process, not through the investigator.
2. The employer insists and threatens to find someone who will do it. What should Owen do, and how does he protect himself?
Read the worked answer
Owen should hold the line, decline in writing, and explain the legal and ethical exposure to the employer so the refusal is informed rather than arbitrary. He should document the request, his analysis of the handbook scope, and his refusal. He should not accept the engagement on a promise to 'be creative,' and he should not share the employee's information beyond what the lawful scope permits. If the employer terminates the engagement, Owen should return or account for the retainer consistent with the agreement and preserve his records. He should avoid any conduct that could look like he was shopping the job to an unlicensed or unscrupulous third party. Protecting himself means a clear paper trail showing he refused an unlawful request.