Bring Your Own Device Policy

BRING YOUR OWN DEVICE (BYOD) POLICY AND AGREEMENT

This Bring Your Own Device Policy and Agreement (the Policy) is entered into by and between the Employer and the Employee identified below and establishes the terms under which the Employee may use personally owned devices to access Employer systems, data, and networks.

WHEREAS

WHEREAS, Employer: employs Employee: ;

WHEREAS, Employer permits limited use of personal mobile computing devices for business purposes subject to the terms, security requirements, and conditions set forth herein to protect the confidentiality, integrity and availability of Employer data.

WHEREAS, Employee wishes to use a personally owned device for business tasks and acknowledges that such use is a privilege conditioned on compliance with this Policy.

SCOPE OF POLICY

ELIGIBILITY & DEVICE REGISTRATION

Employee certifies that the device listed below is personally owned and free of material encumbrances that would prevent Employer from applying required security controls. Employee will register each device with Employer's IT representative prior to connecting to Employer systems.

PERMITTED USE & ACCEPTABLE USE

Employee may use registered devices to access only those Employer resources expressly authorized in writing. Employee shall not use any personal device to circumvent security controls, to store restricted or regulated data without prior authorization, or to engage in activities that could reasonably harm Employer systems or reputation.

SECURITY REQUIREMENTS

Employee agrees to comply with the following minimum security controls for all registered devices: (a) enable device-level encryption where supported; (b) configure an approved lock-screen with a strong passcode or biometric protection; (c) install and maintain Employer-approved mobile security software where required; (d) promptly install critical security updates; and (e) permit remote management actions when requested by Employer IT to protect data and networks.

DATA OWNERSHIP, ACCESS & PRIVACY

Employer retains ownership of all Employer data accessed, transmitted, or stored on the device. Employee acknowledges that Employer may access, monitor, and, where necessary, remotely wipe Employer data on the device to protect business interests. Employer will endeavor to limit access to Employee personal data; however Employee consents to such limited access and understands personal content may be affected by remote management actions.

REIMBURSEMENT AND PAYMENT TERMS

Employer may elect to provide a monthly stipend, reimbursements, or other compensation for business use of Employee devices as set forth below. Reimbursements are conditioned on submission of receipts and prior approval where required.

LOST, STOLEN OR COMPROMISED DEVICES

Employee must report lost or stolen devices to Employer IT within twenty-four (24) hours of discovery. Employer may require remote wipe of the device to remove Employer data. Employee remains responsible for any noncompliance with this reporting requirement.

MONITORING AND AUDIT

Employer reserves the right to monitor use of Employer systems and data accessed via personal devices and to audit compliance with this Policy. Monitoring will be performed in a manner intended to minimize intrusion into Employee personal content while protecting Employer assets.

COMPLIANCE, BREACHES & DISCIPLINARY ACTION

Violation of this Policy may result in suspension of BYOD privileges, mandatory removal of Employer data from the device, disciplinary action up to and including termination of employment, and legal remedies. Employee must cooperate in any investigation of a suspected breach.

TERM AND TERMINATION

This Policy is effective as of Start Date: and will continue until End Date: unless earlier terminated by Employer. Either party may terminate Employee's BYOD privileges upon written notice. Employer will provide notice period of days where practicable.

CONFIDENTIALITY

Employee shall treat all Employer information accessed on the device as confidential and protect such information against unauthorized disclosure. Employee will not store or transmit Employer confidential information on third-party services except as expressly permitted by Employer policy and prior written authorization.

GOVERNING LAW

This Policy shall be governed by and construed in accordance with the laws of the jurisdiction of: without regard to conflict of law principles.

ENTIRE AGREEMENT; MODIFICATION

This Policy, together with any appendices, exhibits, or written authorizations referenced herein, constitutes the entire agreement between Employer and Employee with respect to BYOD and supersedes prior oral or written understandings. Any modification must be in writing and signed by authorized representatives of Employer and Employee.

ACKNOWLEDGMENTS

By signing below, Employee acknowledges receipt of this Policy, confirms understanding of its terms, and agrees to comply with its requirements. Employee consents to the security measures and monitoring described herein.

I have read and understand this BYOD Policy.
I consent to monitoring and remote management as described.
I consent to removal or remote wipe of Employer data if necessary.

ADDITIONAL TERMS

Sign Now