How to separate personal and professional accounts? Everyone knows it's a good practice to separate personal and professional emails, but when talking about online accounts things get murkier.
I maintain open source depended upon by thousands of people, so I am keeping a very strict separation of Github, StackOverflow, etc. I also don't like my personal messages in other networks read by my employee, so I never signed on these.
However, many (most?) websites that are more social-network-like have in their Terms and Conditions that one person might have only one account and that it should be their real name. This includes Facebook, Twitter, Instagram, etc. As I am implementing a Single Sign On, I need access to those and security policies stop me from having access to the company one.
So my question is, what do you do in this situation? The three options are not the best ones:
- Break company rules and ask for permission to the global company account (email+password).
- Break the terms of service and create a second "personal-for work" account. This is not the company account, it would be on my name but private and used to be given permission to certain parts. Would this be an issue for me personally or for the company? What if I don't agree to the ToS?
- Break my privacy and access my personal accounts from work (which I'm pretty sure it's heavily monitored). This is not an option as explained.
I'll ask my manager soon about this and it's probably a non-issue, but I was wondering, What would you do in this situation?
In case it's relevant, I'm in Japan where there's very little expected privacy from the individual towards the company.
Note: I wasn't sure whether asking this here, in security or in legal stackexchanges since it touches a bit of all, but it's mainly about the workplace so I'm asking it here.