Each company that has any form of access or publishes anything on the internet should have an 'Internet Policy'. This will cover the company and employees as it will describe in detail anything that the company deems to be 'inappropriate', illegal or anything else. That way everyone knows what they can and cannot do. e.g. is booking a holiday allowed? what about IM use in co hours? downloading music? you need to make it clear what can and cannot be done. It will also cover the company with regards to ensuring all employees responsibility to complying with any legal requirements e.g. email footers with regulatory info in them.
Have a look here
http://www.businesslink.gov.uk/bdotg...cId=1076141950