This Precedent is an internal-facing bring your own device (BYOD) policy for use in relation to employees, other workers and contractors (staff), designed to be used with other policies and privacy notices. This particular policy takes into account the requirements under Assimilated Regulation (EU) 2016/679, UK General Data Protection Regulation (UK GDPR), those in the Data Protection Act 2018 (DPA 2018) and the Information Commissioner’s Office (ICO) guide to the GDPR. It is intended for all staff who bring their own computing devices (eg laptops or smartphones) to work and use these to connect to the company’s IT systems. It is in short form and plain, non-technical English so that it can be easily understood. This policy has been drafted to supplement other related policies such as those covering data protection and information security. It will need to be adapted to reflect the technical basis on which access is granted to company IT systems from personal devices.