If private end devices are used for work-related purposes, this results in a wide range of potential risks. For example, legal problems can arise in relation to software licences. If, in an emergency, work-related data needs to be deleted from a device through the corresponding MDM system, this may also affect the user’s private data.

In addition, the persons in charge of IT cannot check every single private device to see whether it meets their organisation's requirements. This means devices can be used with which users may violate data protection and security requirements. Furthermore, users are often personally responsible for having their devices serviced and repaired. During such repairs, company data could be viewed without authorisation, for example. The same threat exists if an organisation has not regulated what should be done with the data on the devices of employees who are leaving the organisation.