• Don't break the Law for the company or the boss.
• Keep the company shit in company devices and your shit in your devices. That means company computer and phone for their stuff and your own for yours. If there's ever any Lawsuit or Criminal investigation on the company they won't take your stuff as evidence if you don't at all use it for company work and won't intrude in your privacy if the company stuff isn't used for your own stuff.
• Even if it's totally legal, if something that your are being ordered to do against your better advice might come back to bite you (i.e. you might get blamed for the negative outcome you predict will come from it), get that order in writing.

Even your direct lead can't be assumed to be your friend (no matter how nice: niceness is easily and commonly faked) until you've gone through some proper shit together and he or she has shown themselves to be somebody that will take the hit rater than "blame their underlings" - trusts is earned, not due.