Gartner distinguishes between monitoring (asset-centric data collection) and surveillance (people-centric monitoring of specific individuals).
Monitoring involves asset-centric techniques to collect data from IT assets and systems. Surveillance involves people-centric overt and covert monitoring of defined persons or groups to provide comprehensive awareness of their activities in specific contexts. This distinction is important for legal, ethical, and operational considerations in insider risk programs.