The question then is who has to prove company time and equipment were used? Employer or employee?
I ask because practically its going to be a grey zone. If you accessed your private gmail account during office hours and happened to see you have a potential customer lead for your out-of-hours project, are you in violation?