As a consequence of COVID-19, organisations have been forced to review the way they manage their workforce and workplace resulting in the rapid adoption of workplace technologies. The commercial real estate industry has been adopting more technology at an accelerated pace, transforming offices into smart buildings and workplaces into ‘behavioural labs’ where emerging IOT technologies (wearable and otherwise) are employed to track and nudge the emotions, behaviours, creativity, and productivity of the (remote) workforce... But what about our privacy and the security of our data? And why is it that human behaviour is the greatest threat to an organisation's cyber security posture?