This material considers the UK GDPR regime, and legislative links are to Assimilated Regulation (EU) 2016/679, UK GDPR, except where expressly stated otherwise.

1. 1. 1

      Introduction

      1. 1.1

         The Company is committed to the highest standards of information security and treats confidentiality and data security extremely seriously.

      1. 1.2

         This bring your own device (BYOD) policy supplements the Company’s other policies and procedures, which together place obligations on staff to take appropriate measures to safeguard Company information against unauthorised or unlawful use, accidental loss, destruction or damage, by extending and/or clarifying these obligations in relation to staff use of their own personal devices at work.

      1. 1.3

         The purpose of this policy is to protect the Company’s confidential, commercially sensitive and personal information and to ensure the Company can comply with our legal and regulatory obligations, including those regarding Data protection, record retention and audit by setting out the circumstances in which the Company may monitor your use of its systems; access, retrieve, remove and destroy data on your device; and the action the Company may take if you fail to comply