At my place, we do not actively monitor user activity because that would be too much, but if we see that someone is using quite a bit of bandwidth, we would look into 'why?'. Everyone is aware that we "may" monitor, but it looks they don't believe us

In other words play safe