Further, it is critical for employers to understand the types of conduct that the law does not prohibit, he writes, including passwords to personal devices, such as smartphones, and "shoulder surfing, meaning an employer could still ask an employee to log in to a social media site while the employer observes.Full Story