Can Slack DM Conversations Be Accessed?

Can Slack DMs be accessed? Things administrators need to know

Earlier this year (May 2024), Kang Hyung-wook, CEO of Bodum Company, was embroiled in controversy for allegedly accessing his employees' messenger conversations without authorization. The messenger used at the time was reportedly Naver Works. This incident sparked curiosity among many about the accessibility of conversation history within collaboration tools.

So, for those of us using Slack, we need to examine whether our 1:1 conversation content can be viewed by administrators or owners, right? Below, we've summarized the possibilities and conditions.

Can DM conversations be accessed in Slack?

In Slack, administrators or owners cannot directly access employees' 1:1 conversations (DMs). This is due to strict limitations imposed by relevant laws, including personal information protection laws. In other words, unless under specific circumstances, conversation content cannot be arbitrarily viewed.

So, what are these 'specific circumstances' under which access is allowed? We've summarized those cases below.

Situations where access may be permitted

When company asset protection is necessary

• Suspected confidential information leakage: When an employee is suspected of attempting to leak or has already leaked confidential company information.
• Protection of trade secrets: When necessary to protect company trade secrets or intellectual property rights.

When legal issues or lawsuits arise

• Legal disputes: When legal disputes arise between an employee and the company, or when legal proceedings related to the employee's actions are underway.
• Legal requests: When an investigative agency or court requests the company to provide conversation records as part of a legal procedure.

During internal audits or investigations

• Internal investigations: When there's a need to investigate misconduct, financial loss, etc., within the company.
• Ethical violations: When an employee is suspected of violating company ethical guidelines or codes of conduct.

When necessary for business operations

• Business handover: When an employee suddenly resigns or is absent for an extended period, requiring business handover.
• Confirmation of responsibility: When it's necessary to clarify an employee's responsibilities in a specific project or task.

In case of security breaches

• Security violations: When an employee violates the company's IT security policies by illegally accessing the system or poses a threat to security.
• Malicious code distribution: When there is evidence of an attempt to distribute malicious code or viruses through the messenger.

Other reasons

• Defamation and sexual harassment: When there are reports of an employee defaming other employees or third parties through the messenger, or using sexually suggestive, violent, or abusive language.

So, how can access be gained?

Even if the above conditions are met, administrators or owners cannot immediately access the conversation content. A court order or explicit consent from the employee is required. For example, in the case of Google email, there have been instances where conversation content was provided due to reasons like confidential information leakage, when requested by the US Department of Justice for legal reasons. Slack would also only allow access to conversation history under similar circumstances.

The Role of Administrators in Slack

Slack is widely used as a tool to maximize collaboration efficiency, but it also places a high value on protecting individual privacy. Administrators must understand these policies, comply with company regulations, and ensure that employees can work with peace of mind.

When using Slack, it's crucial to be aware of these access conditions to prevent misunderstandings and issues.