Can you determine whether an employee downloaded company information

In many cases, relevant audit information, file metadata, synchronisation artefacts and evidence recovered from the employee's computer or other devices can help determine whether company information was accessed, downloaded, copied or transferred.