How much should an employer be able to regulate or monitor their employees’ online or social media activity within the workplace?

What about when the employee is outside the workplace?