HR Glossary
HR Glossary
GDPR in the home office
GDPR fully applies in home offices, with stricter requirements on technical and organizational measures.
GDPR in the home office brings no new legal basis but tightens the bar on TOMs since the employer's physical control is reduced.
Controller responsibility
The employer remains the Art. 4 (7) GDPR controller – even if data is processed at the kitchen table.
Technical measures
- VPN, MDM, disk encryption
- Privacy filters
- Secure print & shredding
- Multi-factor authentication
Organizational measures
Clear policies, regular training, data confidentiality obligation, updated processing record – anchored in the works agreement.
Practice
A central platform like onyo Compliance bundles training, asset inventory, and audit trail.