Forgot to mention that employers soon won't be allowed to demand their employee's facebook or other social networking passwords as a condition of employment. So the employee will have total privacy and the employer cannot protect themselves.

Simply this - block ALL internet access for regular employees. They don't need it to do their jobs.