There should be a clear policy regarding ted at that can be used by the company only and that can be used by the employees. By this it can be clearly categorized regarding accepted usage of company data and personal data.