As digital workplaces expand and employee activity increasingly blurs the line between professional and personal spheres, organizations face a growing array of cyber and online harms—from data breaches and ransomware to doxxing, cyber-enabled harassment, and AI-driven misconduct. For HR professionals, these risks are no longer confined to IT; they raise complex legal, regulatory, and workplace safety obligations that require informed, timely, and defensible responses.
This session will provide a practical, legal-focused roadmap for identifying, assessing, and responding to both established and emerging online threats affecting the workplace. It will clarify what constitutes doxxing and related forms of online harm, and examine real-world examples of emerging risks, including deepfakes, impersonation, coordinated harassment campaigns, and misuse of employee or corporate data.
Participants will explore when online conduct—whether on-duty or off-duty—crosses the threshold into a workplace issue, triggering employer responsibilities. The session will outline key legal and practical obligations, including privacy compliance, duty to provide a safe workplace, human rights considerations, and appropriate limits on monitoring and discipline.
The presentation will also address escalation considerations and best practices for managing investigations involving online behaviour, including evidence preservation, jurisdictional challenges, balancing privacy with workplace safety, and responding proportionately to risk.
Attendees will leave with actionable strategies to “fix” governance gaps, strengthen policies and training, and build effective incident response frameworks—enabling organizations to reduce liability, support affected employees, and navigate an increasingly complex and fast-evolving digital threat landscape.
LEARNING OBJECTIVES
- This session will provide a practical, legal-focused roadmap for identifying, assessing, and responding to both established and emerging online threats affecting the workplace. It will clarify what constitutes doxxing and related forms of online harm, and examine real-world examples of emerging risks, including deepfakes, impersonation, coordinated harassment campaigns, and misuse of employee or corporate data.
- Participants will explore when online conduct—whether on-duty or off-duty—crosses the threshold into a workplace issue, triggering employer responsibilities. The session will outline key legal and practical obligations, including privacy compliance, duty to provide a safe workplace, human rights considerations, and appropriate limits on monitoring and discipline.
The presentation will also address escalation considerations and best practices for managing investigations involving online behaviour, including evidence preservation, jurisdictional challenges, balancing privacy with workplace safety, and responding proportionately to risk. - Attendees will leave with actionable strategies to “fix” governance gaps, strengthen policies and training, and build effective incident response frameworks—enabling organizations to reduce liability, support affected employees, and navigate an increasingly complex and fast-evolving digital threat landscape.
AGENDA
Noon to 1:30 PM Presentation
Registration Difficulties or Questions: Please reach out to Tracey Gallacher, Specialist, Member Engagement