In my experience, small businesses are actually the ones that love to spy. There's really no tech oversight so when the owner asks for access, they get it. Whereas if a middle manager in an enterprise company asks to see their reports mailboxes, security will tell them to get fucked.
This. Coming from MSP world, the number of SMBs who harbor such an intense hatred of their own workers to the point of demanding total surveillance is basically all of them; customers refusing surveillance packages are the exception, not the norm.
Irony is that surveillance cuts both ways, and big companies know it. Any data you collect can and will be subpoenaed at some point, and that’ll multiply your damages paid out in the process.