I am not a lawyer, but from what I understand from a forensics class I took, personal devices can be in scope in the US if: * A warning banner is displayed whe

I am not a lawyer, but from what I understand from a forensics class I took, personal devices can be in scope in the US if: * A warning banner is displayed when you connect to the VPN / network / asset that states that use of the resource voids your expectation of privacy, you consent to monitoring, and you acknowledge they can inspect personal devices etc * You signed a policy document acknowledging that they can monitor you and that connecting to a company resource brings your personal device in scope of monitoring and seizure * You committed a crime, the police become involved, and a search warrant is issued. If you do not sign such a policy document, they do not have evidence of a criminal (ie not civil) infraction, and they do not display a warning banner, then you can claim reasonable expectation of privacy (meaning you were ignorant of their policy), refuse a search, and there isn't much they can do to my knowledge. In this specific case you would have to talk to a lawyer, but I would just be safe and use only work assets for work.