Work Tablet Stolen from the Car – Notification Duties Within 72 Hours
Fatti validati
If an unencrypted work device is stolen, Art. 33 GDPR may require notification to the supervisory authority preferably within 72 hours of becoming aware, where there is a risk to data subjects. Full encryption can substantially reduce the risk and thus the notification duty.
Spiegato in modo semplice
A stolen tablet without PIN and encryption is like an open patient file on the marketplace.
Rilevanza per la sicurezza e consiglio pratico
Set up MDM, encrypt devices with BitLocker/FileVault and enable remote wipe.