In light if the COVID-19 crisis, many organizations have decided to implement smart working for their employees. To this end, the Irish DPA has issued useful Guidance to protection personal data when working from home which can be found here.

DPC Ireland’s advice is divided into three macro categories: Devices, Emails, and Cloud/Network Access. Below you can find their useful suggestions:

“Devices

• Take extra care that devices, such as USBs, phones, laptops, or tablets, are not lost or misplaced,
• Make sure that any device has the necessary updates, such as operating system updates (like iOS or android) and software/antivirus updates.
• Ensure your computer, laptop, or device, is used in a safe location, for example where you can keep sight of it and minimise who else can view the screen, particularly if working with sensitive personal data.
• Lock your device if you do have to leave it unattended for any reason.
• Make sure your devices are turned off, locked, or stored carefully when not in use.
• Use effective access controls (such as multi-factor authentication and strong passwords) and, where available, encryption to restrict access to the device, and to reduce the risk if a device is stolen or misplaced.
• When a device is lost or stolen, you should take steps immediately to ensure a remote memory wipe, where possible.

Emails

• Follow any applicable policies in your organisation around the use of email.
• Use work email accounts rather than personal ones for work-related emails involving personal data. If you have to use personal email make sure contents and attachments are encrypted and avoid using personal or confidential data in subject lines.
• Before sending an email, ensure you’re sending it to the correct recipient, particularly for emails involving large amounts of personal data or sensitive personal data.

Cloud and Network Access

• Where possible only use your organisation’s trusted networks or cloud services, and complying with any organisational rules and procedures about cloud or network access, login and, data sharing.
• If you are working without cloud or network access, ensure any locally stored data is adequately backed up in a secure manner.”