Monitoring employee's conversation with customers on institution-provided MSN in office hours is something of internet surveillance, which incurs personal data collection, and as such is subject to the provisions of the Personal Data Protection Act. The employer should prepare his or her personal data collection statement with reference to Principles concerning the protection of personal data in the workplaces: guidelines for employee monitoring.