As an organisation we award designations and qualifications. From time to time we get reports of individuals falsely holding themselves out on LinkedIn as qualified. To investigate these, employees use their personal accounts to view the profiles of the alleged offenders.
By using their accounts are employees processing their personal information as well as those of the individuals they are investigating? I am struggling to find a lawful basis for asking employees to use their accounts (imbalance of power negates consent etc).