If the company is sued and your personal device is also your work device, everything in it can be part of the discovery process. If it’s a criminal affair, such devices can be confiscated as evidence for an indeteremined amount of time.
This shit goes way beyond “mere” privacy concerns.
If the incompetent idiots keep on pushing for you to run company stuff on your devices, simply point out that it would legally expose you to the company’s legal affairs.
If the company is sued and your personal device is also your work device, everything in it can be part of the discovery process. If it’s a criminal affair, such devices can be confiscated as evidence for an indeteremined amount of time.
This shit goes way beyond “mere” privacy concerns.
If the incompetent idiots keep on pushing for you to run company stuff on your devices, simply point out that it would legally expose you to the company’s legal affairs.
In a security audit the personal device also probably becomes “in scope”.