>Tracking too much of what the user does, and who does it, could be considered a privacy violation.

In a business application?? I doubt it

Peter