IMO there should be a section on privacy in the workplace with questions about what monitoring or contrary - privacy-preserving implements there are in the organization.
Ex. are devices actively monitored (screenshots, keyloggers), can workers be filmed, taken photos of and under what conditions? Something along these lines?