Staff members should get their company to explain why it needs the passwords, if the company has relevant rules for this practice, and under what circumstances will the company access the staff's working computers, whether it has designated specific persons to do the accessing and whether it would notify or obtain approval of the staff whose data are concerned prior to accessing their computers, etc. A company may access and review its facilities or equipment on grounds that it needs to ensure its general interest, therefore the appropriateness of this practice depends on specific circumstances.