Working From Home – FAQ

IT and data protection regulations

In order to contain the spread of the COVID-19 virus (coronavirus), it is recommended to avoid social contacts. Where possible, work should be done from home. In the following you will find answers to the most frequently asked questions, especially with regard to European IT and data protection regulations that must be adhered to when employees work from home.

Q: How can the employer protect confidential data from third party access if it allows its employees to work from home?

A: Employee access to the employer's systems should be provided via a secure access point (e.g. VPN access) with robust access verification. In addition to encryption 'in transit' of communication with the company network, the operational end devices should have reasonable protection mechanisms (password protection, encryption etc.). Further, the employer should consider restricting access to systems and data on a need-to-know-basis. This particularly