Programs that detect security-relevant events and evaluate logged data often collect a wealth of information on the network structure and internal processes of an organisation. This may include sensitive information such as personal or confidential data or employee workflows. Since such data can be stored, however, employees' personal rights and rights of co-determination may be violated. Under certain conditions, the organisation may also be in violation of the respective data protection laws.