Employee Computer Surveillance

Many of us know that EPA has a policy allowing limited use of EPA's computers for certain personal activities. As a result, many of you do the occasional personal web surfing, check your personal email, or check Twitter or Facebook. EPA's policy notes that the policy is "to provide you with a professional and supportive work environment while meeting taxpayer expectations that tax dollars will be spent wisely."

The policy allows "limited personal use ... during non-work time:

• if it involves minimal additional expense to the Government;

• if it does not reduce your productivity or interfere with your official duties or the official duties of others;

• if you are already authorized to use the equipment for official Government business; and

• if it is legal and appropriate."

What you may not have considered, however, is that EPA is looking over your shoulder while you're doing that limited personal use. EPA may be viewing the Facebook accounts that you view, the tweets that you view, your emails and photos, and anything else that comes over its network. So if one of your friends thinks it's funny to send you a nude photo to your personal email account, when that photo loads on your government computer, the government can, if it wants to, see that photo even though you did not save a copy. A copy of that photo is automatically saved, whether you want it or not, on your computer's hard drive web "cache" and can be used against you later.

Tools EPA uses or can use to monitor your activities include:

• Keystroke loggers

• Microphone activation

• Remote Camera Activation

• Monitoring Screen up time

• Mouse activity

• Log-ins and smart card insertions

• Website history (pages, clicks, images, and video)--cache

• "man-in-the-middle" tools to monitor encrypted communication

Our advice is that you significantly limit your personal use on your government computer. Use your phone. Use your personal laptop. Use your home computer. But keep your personal browsing and other activities off government computers as much as possible. Put a cover over your laptop camera.  Mute your microphone.  But keep in mind that there are workarounds where the agency can activate the microphone against your wishes and record each keystroke you type.

If you're focusing on your work rather than on personal surfing, you're fine. But it's good to be cautious. Just because you're paranoid, doesn't mean they're not out to get you!

Badging Entry Update

You may have seen an email this week from the Office of Administration and Resource Management's Facilities Management and Services Division regarding the "Physical Access Control System" in WJC North and South buildings. This new system will eventually require that your badge be held to a small black pad for a short time when coming into EPA buildings or into interior controlled spaces.

As you can probably imagine, this new system generates a large amount of data on when you came into a building, and if management has its way, in the evening when you leave. Our members are understandably concerned that this data would be improperly used as a defacto time clock, much like factory workers punch when clocking in and clocking out of the factory floor.

Fear not, NTEU has you covered.

EPA management assures us that this system is to be used for security purposes only, not for timekeeping. But we're not taking their word for it! We negotiated a memorandum of understanding that specifies that the system "shall not store or track, or be used to store or track, attendance, location, or work hours" of employees. It's just one more thing NTEU Chapter 280 is doing to protect you.

Keep in mind that we're only able to have this kind of positive impact on you if you are a dues-paying member. Please consider joining today and strengthening our bargaining position. More information here.