Work Tablet Stolen from the Car – Notification Duties Within 72 Hours
Validated facts
If an unencrypted work device is stolen, Art. 33 GDPR may require notification to the supervisory authority preferably within 72 hours of becoming aware, where there is a risk to data subjects. Full encryption can substantially reduce the risk and thus the notification duty.
In plain language
A stolen tablet without PIN and encryption is like an open patient file on the marketplace.
Security relevance & practical tip
Set up MDM, encrypt devices with BitLocker/FileVault and enable remote wipe.