The CEO wants to read all incoming mail in the organization

Question

Mail for domain

Please tell me about the following question: there is an organization for 50 people. There is a server through which the Internet is distributed to everyone. The director wants to be able to read the mail of all employees from his personal computer, work mail, of course. At the same time, it should be stored, apparently, on the server, but she wants to read it from her personal computer, so as not to run to the server every time. How can this wish be realized?

Answer 1

Well, since holivar, the lawyer's answer about the legal side:
art. 10 Part 4 of the Federal Law of the Russian Federation of July 29, 2004 No. 98-FZ “On Commercial Secrets” states: “The owner of information constituting a commercial secret has the right to apply, if necessary, means and methods of technical protection of the confidentiality of this information, others that do not contradict the legislation of the Russian Federations, measures.
The employer pays for email traffic used by employees for personal purposes, and their working time spent on personal communication. He will also bear losses in case of leakage of confidential information.
That is, all correspondence carried out during working hours with the help of technical means belonging to this organization, and through channels of communication or data transmission paid for by it, is official, even if it is conducted outside working hours.
I can write a separate article if it will be of interest to many.

Answer 2

forward all mail to director's mailbox

Answer 3

From a technical point of view, for example .
But I draw your attention to the legal aspect. I would consult with a lawyer first.

Answer 4

Are there any such cases mentioned in our legislation? Those. Who is the boss reading the employee's correspondence, and how to separate - which of the mail is personal (personal) data, and what is corporate?

Answer 5

Taking into account all of the above, you should set up your own mail server (if you have money, then you can use MS Exchange, if there is not much money, Exim or something like that will do), and then set up the rules for the blind copy of letters on the director's mailbox.
From the point of view of legislation, there is Article 138 of the Criminal Code of the Russian Federation on violation of the secrecy of correspondence, as well as Article 23 of the Constitution of the Russian Federation, about the same. Many people say that if the “read mail” clause is written in the employment contract, then everything will be legal, but they are mistaken - the constitution is “Higher” in the status of any contracts.
To read the correspondence of employees, there are various DLP systems, according to the manufacturers, they are completely legal. It is also worth considering that only outgoing letters can pose a threat to the spread of confidential information, so reading incoming messages is a rather dubious necessity. In general, in our realities, whoever has a “stronger” lawyer and more money is right.

Answer 6

by means of the mail server to do forced hidden copying of mail to her personal or specially allocated mailbox.
How to find instructions - we drive in the name of your mail server and something from the words "bcc, hidden copying of all mail"
At least what mail server you have write.

Answer 7

It depends on what kind of mail, what mail server, whether you need to do it at home and for free, or you can do it for money and “in the cloud”.
For Exchange, you can organize it by your own means - we create a journaling rule (new-journalrule ..., or at the database level), in which we say, for example, that copies of all letters will be sent to such and such a mailbox, and we give access to that mailbox to the director .
In most other mailers, this is also somehow implemented.
There is also a large bunch of offices that provide mail archiving services, for example:
www.globalrelay.com/
www.liveoffice.com/
, and another wagon and a small cart.
Some replace the MX record of the domain, some sit on the server, catch everything incoming / outgoing and forward it to the right place. At the same time and a backup, and a human interface with a search. But it costs money.

Answer 8

look towards corporate solutions for data leakage protection (http://www.anti-malware.ru/russian_dlp_market_2009_2011)

Answer 9

In Postfix, this is done using sender_bcc_maps and recipient_bcc_maps . For details, I suggest referring to the documentation .

Answer 10

If your mail server was on Dovecot, and all users would use IMAP, then you could use the master account through the web interface (roundcube) and read all mail (incoming, outgoing - any) calmly. This works for me, for example (but only I use the master account for admin purposes).

Answer 11

Can't you just use a letter collector in a box or an email client (Mozilla Thunderbird, Microsoft Outlook, The Bat or another)?
We have The Bat, connection via imap, and marked as read is disabled in the settings.
Z.Y. We have a common box, several users connect at the same time and view mail.

Answer 12

The correct solution here would be to install network-based DLP, which will allow you to read not only mail, but also various im and see who goes where on the sites. Including will be monitored and mail via the web. From a legal point of view, all this will be legal, no secret of personal correspondence will be violated