[jyl]

Another option is to encrypt any personal stuff that you keep on your work laptop.

It used to be hard to not have ANY personal stuff on your work laptop, because carrying two laptops is a pain and when you’re in a hotel and want to do some personal stuff, you’re not going to wait until you get home.

So I may or may not have once completely wiped my work laptop, before handing it in with my badge. As in, opened the machine up, pulled the drive, plugged it into my desktop, used secure delete software to overwrite every bit on the drive, put the drive back in the machine and handed in a dead machine. IT re-images the machine anyway before issuing it to the next drone, and any actual work data was always on a network drive so all that was being wiped was Windows OS, Office and some standard apps.

Now, with cloud storage easily available, there’s no reason to keep anything personal on a work machine. Unless IT blocks access to cloud services etc, as some do.