Law & occupational safety
What applies to data protection when working from home?
The GDPR also applies in the home office. The employer must define technical and organisational measures that keep personal data protected in the private home too – for example device management, encrypted connections and rules for handling documents.
In practice: managed company devices instead of private computers, encrypted storage, VPN or zero-trust access, rules for printouts and a requirement that household members must not view work data.
Also address video calls: neutral background, headphones for sensitive topics and recordings only with a legal basis.
The measures belong in the policy and the company's data-protection documentation – that satisfies accountability.
Key points
- GDPR applies regardless of location – adapt TOMs to the home office
- Managed company devices, encryption, secure access
- Rules for printouts, calls and video meetings
This page provides professional orientation, not legal or tax advice.
More answers
- What is the difference between home office, telework and mobile work?
- Is a risk assessment mandatory for home office work?
- What fines apply for missing occupational safety in home offices?
- Is an accident in the home office a workplace accident?
- Do employees in Germany have a right to work from home?
- Does the works council co-determine remote work?