When you join a company, you typically sign an agreement that talks about how the company owns all your output. Thumbs upping a Teams message is work output and they own it.
Every email sent and received. Every keystroke. Etc etc etc.
If you don’t want your employer to log and sell it, start your own company. Or use a personal device. I do the latter.
Of course if it's shared communication media (e.g. a mailing list) it can, but not at your private address, no matte if it's @company.com, it's considered the same as your private email.
> Italian Supreme Court case law according to which defensive controls may be carried out where there is a well-founded suspicion of unlawful conduct, provided that an appropriate balance is struck between the employer’s interests and the employee’s dignity and privacy, and that the control concerns data acquired after the suspicion arose.
It's like saying I consent to my phone company's 200 page long terms and conditions.
Corporate America has a very fucked up definition of consent, and they seem to have spread that definition broadly.
I disagree with this and think it’s a bad thing. If I founded a company, I would explicitly disallow this and make communications private and not resellable.
But it exists, sadly.