| Course | ACC 693 Investigating with Computers |
|---|---|
| Module | Module 4 |
| Paper type | graduate discussion post on employer access to personal devices and accounts |
| Length | About 400 words, 3 pages |
| Format | APA 7 student paper |
| School | Southern New Hampshire University |
| Program | MS Accounting |
| Updated | October 2026 |
Free sample paper for ACC 693 Module 4
Module Four Discussion
A Saved Password Is Not Permission
Two facts came up while planning the evidence collection in our roofing case. First, the project manager used his personal iPhone for work texts, under a policy that lets the company manage a work container on the phone. Second, the IT staff member who would help image his laptop mentioned that his Gmail password was saved in the browser. The temptation is obvious: his texts with his brother-in-law and his personal email may be exactly where the subcontractor was planned.
The company can collect what it owns and controls: his company mailbox, OneDrive, the job folders, the system logs, the laptop's contents and the work container on his phone, including work email and the company's messaging app. The acceptable use policy he signed tells employees not to expect privacy in company systems. What the company cannot do is open his Gmail. A federal court in New York held that an employer which used login details a former employee had left on a work computer to read his Hotmail account had violated the Stored Communications Act, and it refused to let the employer use the emails (Pure Power Boot Camp v. Warrior Fitness Boot Camp, 2008). A saved password is not permission, and the risk is both legal liability and losing the evidence.
His personal texts are similar. The Supreme Court's phone decision concerned police, not employers (Riley v. California, 2014), but its description of how much of a person's life a phone holds explains why courts are protective. The device policy covers the container, not his personal messages, and Casey (2011) notes that lawful authority must be established for each data source before it is examined, not afterward.
That leaves three routes. The company can ask him for consent to review specific messages at his interview. If the company sues, it can demand relevant texts and emails through discovery. Or, after a referral, police can seek a warrant. There is also a practical point. Much of what we need may already be on the company side: if he texted crews about the subcontractor's work, the replies on crew members' company phones are company data, and his work email may hold the invoices. Starting with those may make the personal accounts unnecessary.
For classmates: would you ask for consent at the interview, knowing that a refusal may tip him off before law enforcement is involved, or wait?
References
Casey, E. (2011). Digital evidence and computer crime: Forensic science, computers, and the Internet (3rd ed.). Academic Press.
Pure Power Boot Camp v. Warrior Fitness Boot Camp, 587 F. Supp. 2d 548 (S.D.N.Y. 2008).
Riley v. California, 573 U.S. 373 (2014).
What the ACC 693 Module 4 instructions ask for
The Module Four discussion in ACC 693 asks about privacy and legal limits in digital investigations, often focused on employee devices and accounts. Prompts may ask what an employer may search, how policies on acceptable use and personal devices affect the answer, what laws restrict access to stored communications and how investigators can obtain evidence lawfully. A strong post works from a specific situation, such as a saved password or a personal phone used for work, and explains why some actions are permitted and others are not. Legal sources, including court decisions, should be described accurately rather than as general rules. Replies can test a classmate's proposal against the same limits.
How this ACC 693 Module 4 discussion example is built
The post begins with two facts: the project manager texted crews from his own phone under the company's device policy, and his Gmail password was saved in his laptop's browser. It explains that the company may collect its own mailbox, files and logs and the managed work container on his phone, but not his personal messages. It describes a federal case in which an employer that used a former employee's stored password to read his personal email was found to have violated the Stored Communications Act. It notes the Supreme Court's description of how much a phone reveals, then lists consent, a civil subpoena and a law enforcement referral as lawful routes, and asks classmates whether to request consent.
Where the ACC 693 Module 4 rubric puts the points
Instructors grading this discussion generally look at understanding of privacy and legal limits, accurate use of law and policy, application to a scenario, identification of lawful alternatives, use of sources and replies. High-scoring posts distinguish company-owned systems from personal devices and accounts, explain how policies shape expectations of privacy, describe relevant statutes and cases correctly and propose a lawful path to the evidence. Posts that endorse accessing personal accounts because a password was available, or that claim employers can never review anything an employee touches, earn less. Replies earn credit for pointing out a legal risk or an alternative route a classmate missed.
ACC 693 Module 4 help: the mistakes that cost points
Students sometimes assume that because a device or network belongs to the company, everything on it is fair game, or the reverse. Work through the specific sources: company email, company files, a managed container on a personal phone, personal apps on the same phone and personal web accounts each sit in a different position. Describe the law precisely; the Stored Communications Act concerns unauthorized access to communications held by a provider, which is why logging into someone's webmail with a saved password is risky. Finally, show the lawful options, since the investigation still needs the evidence and there are proper ways to seek it, and say which one you would try first.
Get ACC 693 Module 4 written to your instructions
Send the ACC 693 Module 4 prompt. You will get a post that draws the line between company data and personal accounts through one case, uses the relevant law correctly and leaves classmates a genuine dilemma. Two days, usually; your first post is free. The paper above is an original model document written by our desk, not a submitted student paper and not an official Southern New Hampshire University document.
More ACC 693 papers and related MS Accounting samples
- ACC 693 Module 1 Discussion: What Computers Changed About Fraud Investigation
- ACC 693 Module 2 Data Analytics Assignment: Testing Three Years of Payables
- ACC 693 Module 3 Milestone One: The Digital Evidence Plan
- ACC 691 Module 4 Discussion: Cookie Jars and a Big Bath
- ACC 550 Module 2 Cost Behavior Short Paper: Fixed, Variable and Sticky Costs at a Seasonal Plant
- ACC 690 Module 4 Discussion: What the Chief Operating Decision Maker Sees
- ACC 610 Module 7 Discussion: What IFRS Would Do Differently With Impairments
ACC 693 Module 4 questions, answered
Where can I find a free ACC 693 Module 4 Discussion sample?
The full ACC 693 Module 4 post is on this page, examining a roofing contractor's limits on a project manager's personal phone and Gmail.
Can an employer read an employee's personal email in an investigation?
Generally not without authorization; accessing a personal web account without permission, even with a saved password, risks violating the Stored Communications Act.
What can an employer collect from a personal phone used for work?
Typically only what its policy and the employee's agreement allow, such as data in a managed work container; personal messages and apps usually require consent or legal process.
What is the Stored Communications Act?
A federal law that prohibits intentionally accessing stored electronic communications held by a communications service without authorization and limits how providers may disclose them.
How can investigators lawfully obtain evidence from personal accounts?
By asking for consent, by seeking documents from the employee through discovery or subpoena in litigation, or by referring the matter to law enforcement, which can seek a warrant.