Karan manages a law firm that deals with the mergers and acquisitions of various businesses. to maintain the confidentiality of such deals, karan has initiated a monitoring process to review the emails and social network activity of the employees in his office. which best practice should karan adopt while enforcing this monitoring protocol