In our organization we have now have a software developer that has made a site that is only available internally and is used for the purpose of H.R., employee profiles, & purchasing records. The problem I am having is that this employee will work offsite at his home and will direct copy the database to his own computer at home and do what ever he needs to do for changes in the database that need to be made (layout, processing steps, fix anything that people find when something doesn't work right). After changes are made he copy's back the files that were changed and uploads them so the changes take place back at headquarters. As I mentioned before employee profiles are a part of this so their address, contact information, addresses, etc. (even social security #'s but I put a stop to that one) are moved across when he is doing these processes. Does everyone feel the same as me that the employee profiles are something that should not be copied to an off site personal workstation? Is there a rule/law on this that I can't find? We supply the Internet connection at his house or the workstation either.