---
title: "Good Counsel: Left to Their Own Devices"
id: "24375"
type: "post"
slug: "good-counsel-left-to-their-own-devices"
published_at: "2014-08-01T08:20:48+00:00"
modified_at: "2026-03-16T12:26:24+00:00"
url: "https://associationsnow.com/2014/08/01/good-counsel-left-to-their-own-devices/"
markdown_url: "https://associationsnow.com/2014/08/01/good-counsel-left-to-their-own-devices.md"
excerpt: "If you’ve got a BYOD policy, you’ve got legal risks."
taxonomy_category:
  - "Ethics"
taxonomy_post_tag:
  - "AssociationsNow"
  - "Business"
  - "BYOD"
  - "Data Security"
  - "Legal"
taxonomy_content_format:
  - "Article"
taxonomy_role:
  - "Association CEO / Executive Director"
  - "Director"
  - "Manager"
  - "VP"
taxonomy_persona:
  - "Association Professionals"
---

[Home](https://associationsnow.com/)
 » [Articles](https://associationsnow.com/format/article/)
 » Good Counsel: Left to Their Own Devices

Many associations allow employees to use their own mobile devices for work. Bring-your-own-device (BYOD) programs may enhance productivity and decrease IT costs, but they also lead to legal and other risks, including the increased probability of data breaches. Recent reports indicate that almost half of employers with BYOD programs have experienced a data breach resulting from employee error or intentional wrongdoing.

Here are some steps associations can take to mitigate BYOD risks:

**BYOD policy:** Your association should have a written BYOD policy—not boilerplate but customized to meet the realities of your activities and workplace. The policy should address trade secret protection, access to association email and other system-related resources, data breach response plans, sexual harassment and other equal employment opportunity matters, and employee-training initiatives.

**Privacy:** The use of a single mobile phone for work and personal purposes presents complications when an association wants to monitor activities for security or investigative reasons. Personal information may be deleted when devices are updated. Also, devices may need to be searched for relevant information in the event of litigation or enforcement actions. The BYOD policy and other communications to employees should explain how and for what purposes their devices may be accessed or searched.

**Data security:** Implement adequate safeguards for sensitive information, such as personally identifiable member financial data, that can be accessed using mobile devices. Know what information must be protected, and implement the necessary procedures to satisfy applicable legal requirements.

**Agency:** Employers can be held liable for employees’ harmful conduct or criminal behavior or for binding obligations and contracts they establish with third parties. Define clearly what constitutes work and private use of mobile devices to reduce exposure to vicarious liability.

Other employment issues: BYOD programs blur the line between work hours and personal time and may lead to disputes about overtime pay and expense reimbursement. They could also expose an association to liability under federal or state law if an employee is injured while responding to work-related emails or text messages under unsafe conditions (such a while driving or exercising). Consider internal policies for these situations, and inform employees about their rights, obligations, and limitations under those policies.

(totallyPic.com/ThinkStock)

[A.J. Zottola](https://associationsnow.com/author/a-j-zottola/)

A.J. Zottola is a partner at Venable LLP in Washington, DC.

[More articles by this author](https://associationsnow.com/author/a-j-zottola/)

Tags: [#Business](https://associationsnow.com/tag/business/)
 [#BYOD](https://associationsnow.com/tag/byod/)
 [#Data Security](https://associationsnow.com/tag/data-security/)
 [#Legal](https://associationsnow.com/tag/legal/)

**Stay Informed**

[Subscribe to our free newsletter](https://associationsnow.com/newsletter/)
, *Associations Now Daily News*, to find out what’s happening in the association world every business day.

## You Might Like

- [PodcastBringing AI to Life: Practical Steps for AssociationsFebruary 26, 2025](https://associationsnow.com/2025/02/26/bringing-ai-to-life-practical-steps-for-associations/)
- [TemplateMembers onlyMember Onboarding ToolkitNovember 5, 2026](https://associationsnow.com/2026/11/05/member-onboarding-toolkit/)
- [PodcastAssociations Now Presents: Beyond the Tech Stack: How AI Is Changing the Association PlaybookOctober 29, 2026](https://associationsnow.com/2026/10/29/associations-now-presents-beyond-the-tech-stack-how-ai-is-changing-the-association-playbook/)
- [PodcastSecuring Identity: What Associations Need to Know About Verifiable CredentialsJune 25, 2025](https://associationsnow.com/2025/06/25/securing-identity-what-associations-need-to-know-about-verifiable-credentials/)

## Comments

**Comments are for ASAE members.** [Learn more about comments on this site.](https://associationsnow.com/comments/)

[Log in](https://associationsnow.com/login?redirect_to=https%3A%2F%2Fassociationsnow.com%2F2014%2F08%2F01%2Fgood-counsel-left-to-their-own-devices%2F%23comments)
 to your member account or [join ASAE](https://my.asaecenter.org/select-a-membership-type/)
!