If the confidential information includes any personal data, then they probably can't do it on the train. That's under the new GDPR rules. There would be issues with them carrying a laptop, phone, tablet, etc with personal data. From my understanding, it has to be kept secured in a bag (ideally locked) while traveling, be encrypted (in case it's lost/stolen), and contain ONLY pertinent information that has been approved for such use. I'm not sure if a privacy screen is considered enough. It's worth asking whoever your GDPR compliance officer is (you have to have one). If their tasks don't contain personal data, then there's no issue with them working on the train
Could you please tell me how it's off the mark? That's the impression I was getting from the training I had to take at work
A company doesn’t have to have a “GDPR Conpliance Officer”. Certain types of organisations have to have a designated Data Protection Officer.
If personal data is required to carry out a job, that doesn’t mean you can’t carry a laptop/mobile that contains that data with you. Otherwise, nobody would ever have a work mobile phone, or would have to delete all contacts regularly in-line with DPIAs.
GDPR doesn’t dictate that you have to keep work laptops/mobile in a locked bag. Securing IT equipment when not in use, and encrypting systems is not GDPR-specific. Accessing information in a secure manner while on the go is fine. However, companies are now more accountable for what happens if that data security is breached.
It’s not all that different to the Data Protection Acts (1988, 2003), but is focused more on the ways organisations get and manage data. It means companies are held more accountable for securely managing information, and gives significant fines for breaches due to lack of adherence.
Sitting on a train with a laptop wide open clearly showing personal or commercially data, has always been a no-no, but GDPR doesn’t really change where and when people access data for legitimate reasons.
If that was the case, everyone working on a laptop in an airport departure lounge could rapidly find themselves with a £17m fine.