Work Tablet Stolen from the Car – Notification Duties Within 72 Hours
Hechos validados
If an unencrypted work device is stolen, Art. 33 GDPR may require notification to the supervisory authority preferably within 72 hours of becoming aware, where there is a risk to data subjects. Full encryption can substantially reduce the risk and thus the notification duty.
Explicación sencilla
A stolen tablet without PIN and encryption is like an open patient file on the marketplace.
Relevancia de seguridad y consejo práctico
Set up MDM, encrypt devices with BitLocker/FileVault and enable remote wipe.