Work Tablet Stolen from the Car – Notification Duties Within 72 Hours
Faits validés
If an unencrypted work device is stolen, Art. 33 GDPR may require notification to the supervisory authority preferably within 72 hours of becoming aware, where there is a risk to data subjects. Full encryption can substantially reduce the risk and thus the notification duty.
En termes simples
A stolen tablet without PIN and encryption is like an open patient file on the marketplace.
Pertinence sécurité & conseil pratique
Set up MDM, encrypt devices with BitLocker/FileVault and enable remote wipe.