> I can guarantee your compliance department was monitoring all of your private communications and not telling you about it. This is just what happens in the finance industry

It’s a little bit like the government’s argument that they collect data but they don’t read it

Lots of companies track you, the flow of data, your use of USB ports, web traffic, etc. But they don’t do anything with it 99% of the time. The one time Google or Goldman Sachs realizes you’ve exfiltrated source code or something though, they have the full paper trail they can pull up at will should they choose to pursue it

This reminds me of the government protesting that they only used dragnet surveillance to find terrorists.

And then Snowden was like "actually Ive seen them snooping on your nude pictures".

iPhones had to go to IT to be upgraded to the new iOS ... everytime they would "test" that the install worked by browsing through your photos (always check the deleted folder too ...) and messages

Oh yeah, definitely. We had strict regulations about what we could talk about, where we could talk about it and how we were supposed to. There was always the looming threat of FCA regulation. But tracking and other privacy-breaching forms of surveillance and tracking were definitely not bothered with - in fact, a number of firms would have rather not tracked employee work hours because of all the conversation around junior level fatigue at the time. Most of the tight-lipped tracking of email and other communication came from compliance largely because of regulations against insider trading and the like.

Edit:- we all had personal phones that we could use out of work, which compliance did not track. But it was strictly enforced to not communicate to any business connection using that. They would just fire us if we were caught and shun liability that way.