Hello,

I am having an argument with a coworker, who thinks it is fine to decrypt users passwords to migrate files, as it is faster and more convieniant than having the users resetting their passwords.

I am sure this is almost never necessary, is a horrible invasion of privacy, and quite possibly illegal.

Can anyone shed light on if this is legal or not, and if signing away your data to the company would extend to them having the right to decrypt your passwords?

Any legal cases would be extra useful

Cheers

what is co-worker's job function? What files are being migrated, user profiles? At work you are at the mercy, within legal contractual reason, of the employer

Cudni