When one of the three provisions is met: one of the parties has given consent, there is a legitimate business reason or the company needs to protect itself, the ECPA (Electronic Communications Privacy Act) allows companies to use monitoring software to monitor the employees' documents, emails, etc.