Clean desktop and screen – why is it so important?

28 January 2022

Our first association when we hear about the obligations related to the processing of personal data is their protection against external individuals (e.g., when verifying the identity of a person requesting access to data, or when creating a secure password for our accounts). We often forget that the threat may lurk in our office, and inadequate security of our workstation can have serious consequences. To prevent this, it is important to remember two principles: clean screen and clean desk.

According to the clean screen principle, each time we leave our workstation, we should ensure that no one will have access to the data stored on our work computer during our absence.

  • Firstly, it is essential to develop the habit of logging out of the system every time you step away from the computer. You can quickly lock the screen by pressing the WINDOWS + L key combination.
  • Secondly, your computer should have a screensaver set to activate automatically after a specified period of user inactivity and secure the monitor with a password.

The clean desk principle, on the other hand, aims to ensure that data is stored on network resources (for example, in the form of OneDrive or a file server) rather than on the local disk - that is, directly on the desktop. The benefit of adhering to this principle is to make it more difficult for unauthorized individuals to view the files and folders stored on your computer. The desktop should only contain icons for standard software and business applications, as well as shortcuts to folders (be careful how you name such a folder - you do not want to suggest too much if its contents are valuable).

What can happen if the above principles are not followed?

If the worst-case scenario occurs, an unauthorized person with malicious intent may:

  • take over your access passwords (to your work email, Facebook, etc.),
  • take a picture of your screen - assess the significance of such an event yourself, depending on what you work on daily,
  • gain access to documents whose confidentiality you are obliged to maintain.

Do not forget that any actions performed on your access account by another person will be identified by the system as actions taken by the account owner, namely you.

Read also:

Receive a free package of 4 tutorials and 4 e-learning trainings
The controller of your data is ODO 24 sp. z o. o.