With most MDM products, it is possible to determine where a device is located, and this can be used as a basis for allowing or blocking access to data or apps ("geofencing"). This results in detailed movement profiles for devices, and thus also for their users. If this data is collected without users being appropriately informed, the persons in charge may, under some circumstances, be in violation of data protection regulations. There is also a risk of attackers accessing this data. Geofencing can be misused to unlawfully monitor employees, as well.
- BSI -
Copyright by Bundesamt für Sicherheit in der Informationstechnik (https://www.bsi.bund.de/)