12   Additional requirements for computer surveillance

Computer surveillance of an employee must not be carried out unless:

(a)  the surveillance is carried out in accordance with a policy of the employer on computer surveillance of employees at work, and

(b)  the employee has been notified in advance of that policy in such a way that it is reasonable to assume that the employee is aware of and understands the policy.