# BYOD Privacy Policy Template

## Policy Information

| Field | Value |
|-------|-------|
| Organisation | [Atlas Manufacturing Group] |
| Policy Version | [1.0] |
| Effective Date | [DD/MM/YYYY] |
| Next Review | [DD/MM/YYYY] |
| Approved By | [Name, Title] |

## 1. Purpose

This policy establishes the privacy framework for the organisation's Bring Your Own Device (BYOD) programme, ensuring that employee personal data on personal devices is protected while corporate data is secured.

## 2. Voluntariness

Participation in the BYOD programme is **entirely voluntary**. A corporate-provided device (laptop/smartphone) is available for any employee who prefers not to use their personal device. Your decision has **no employment consequences**.

## 3. Data Separation

Corporate and personal data are separated using [containerisation / work profile / app-level management]:
- **Corporate container**: All corporate email, files, apps, and data reside within an encrypted container.
- **Personal space**: Your personal apps, photos, messages, browsing, and files are outside the container and **inaccessible to the organisation**.

## 4. What We Can and Cannot See

### What We CAN See (Corporate Container Only)
| Data | Access |
|------|--------|
| Corporate email within managed app | IT Security for DLP purposes |
| Corporate files within managed apps | IT Security for data protection |
| Device type and OS version | IT for compatibility management |
| Corporate app compliance status | IT for security management |

### What We CANNOT See
| Data | Access |
|------|--------|
| Personal apps installed | **No access** |
| Personal photos, videos, media | **No access** |
| Personal email and messages | **No access** |
| Personal browsing history | **No access** |
| Personal location | **No access** |
| Personal call history | **No access** |
| Camera or microphone | **No remote activation** |

## 5. Remote Actions

The only remote action the organisation can take on your personal device is:
- **Selective wipe**: Removal of the corporate container and managed apps ONLY.
- Your personal data, photos, apps, and settings are **never affected**.
- **Full device wipe will NOT be performed** on personal devices.

Selective wipe is triggered when:
- You leave the organisation
- You report your device lost or stolen
- You un-enrol from the BYOD programme
- Your device is found to be non-compliant (jailbroken)

## 6. Your Obligations

By enrolling in BYOD, you agree to:
- Set a device passcode or biometric lock
- Keep your device OS updated to the minimum supported version
- Report a lost or stolen device to IT helpdesk immediately
- Not jailbreak or root the device

## 7. How to Un-Enrol

You may leave the BYOD programme at any time by contacting IT helpdesk. Upon un-enrolment:
- The corporate container will be removed
- Your personal data will not be affected
- A corporate device will be provided as a replacement

## 8. Data Protection Rights

You have the right to:
- Request information about what data is processed on your device (Art. 15 DSAR)
- Request correction of inaccurate data (Art. 16)
- Complain to the DPO or the supervisory authority

## Employee Acknowledgment

| Field | Value |
|-------|-------|
| Employee Name | _________ |
| Device Type | _________ |
| Enrolment Date | _________ |
| Signature | _________ |