Abstract: A method and system are provided for monitoring an online activity to be performed by a user of a user computer. A trigger program runs on the user computer to detect possible violations by the user of predefined rules associated with the online activity. The trigger program is configured to analyze multiple streams of data collected by the user computer during the activity. The analyzed data is automatically annotated to assist in determine whether a violation of the predefined rules occurred. The analyzed data is stored for reviewed after the activity. Each trigger program can be activated in response to at least one of: video information about the activity, facial recognition information about the user, audio information about the activity, keystroke information relating to the user computer and the browsing history of the user computer during the activity.