Work Tablet Stolen from the Car – Notification Duties Within 72 Hours
Factos validados
If an unencrypted work device is stolen, Art. 33 GDPR may require notification to the supervisory authority preferably within 72 hours of becoming aware, where there is a risk to data subjects. Full encryption can substantially reduce the risk and thus the notification duty.
Explicação simples
A stolen tablet without PIN and encryption is like an open patient file on the marketplace.
Relevância de segurança e dica prática
Set up MDM, encrypt devices with BitLocker/FileVault and enable remote wipe.