The employer’s account is not the whole answer
A business may administer the workspace while its records contain personal conversations, customer material, third-party copyright and confidential employment information. Keep authority to access or export separate from the proposed right to license the contents for another purpose.
Start by classifying channels and record types. HR discussions, medical matters, union communications, private correspondence and privileged legal advice warrant particular caution. Avoid collecting more of this material merely because a buyer might find it interesting.
Reconstruct the original expectations
Find the privacy notices, acceptable-use policies, employment agreements and collection explanations that applied when the records were created. Record versions and dates. Identify whether the proposed AI use was contemplated and what people would reasonably understand about access and reuse.
ICO worker-monitoring guidance highlights risks around personal and union communications. Its guidance is a useful prompt for UK-related review, not a worldwide rule or a conclusion that a particular reuse is lawful. Seek advice for the actual jurisdictions and workforce involved.
Review content and relationships
Names are only one layer. A rare role, shift, office, incident or performance discussion can identify a person even after a name is replaced. Linked messages may re-create identities through context. Review attachments, quoted replies, calendar descriptions and meeting transcripts as separate sources.
Choose exclusions before sampling and record how they were implemented. Do not label the result anonymous merely because direct identifiers were removed. Test the combined sample across systems, including uncommon cases that are most likely to reveal a person.
Make the review accountable
Assign a responsible reviewer, document unresolved questions and record who approves the final sample. Involve privacy, employment and legal specialists where necessary; do not treat a general employee signature as a universal permission for every future use.
If a transaction proceeds, define allowed use, recipients, security and onward sharing in writing. Keep a route for handling obligations or complaints that arise later. A broad commercial opportunity is not a reason to ignore the people whose work produced the archive.