CIPP-E Exam - Question 74

The most significant challenge for organizations with Bring Your Own Device (BYOD) programs under GDPR requirements is ensuring that data controllers are in control of the data they hold at all times. BYOD environments often complicate the ability to manage and secure data, as employees' personal devices may not adhere to the same security standards and controls as corporate devices, increasing the risk of data breaches and unauthorized access. Ensuring continuous data control is especially difficult in such scenarios, making it a critical challenge in the context of GDPR compliance.