Focusing on the Electronic Communications Privacy Act and emerging state laws, this lesson explores the limits of employee monitoring and off-duty conduct. Students debate the legality and ethics of tracking remote workers and disciplining employees for social media activity. The output is a drafted 'Acceptable Use and Privacy Policy' for a modern, remote-first organization.