But how do you manage? That's why I wanted to hear from infosec operations people who work in Europe. Security breaches can be a massive risk for an organization, and there are undoubtedly a lot of serious security issues, which could've turned into something much worse, that my team at my old job would've missed if we had absolutely no right to look at network and web traffic from a company computer.

I do agree that there should be more requirements to look at data, though. Managers requesting bullshit fishing expeditions to see if an employee is slacking off should be required to submit some sort of evidence before making the request. That never sat right with me, or anyone on my team. But for security issues, there was no question that there was an absolute necessity and justified reason to look at that information.

I'm asking because my concern is maybe European corporate infosec people really aren't managing, here, and are blind to some ongoing major security issues.