Since US laws tend to be somewhat bonkers, a european perspective. If you need some applications installed on a smartphone in order to perform your jobs duties

Since US laws tend to be somewhat bonkers, a european perspective. If you need some applications installed on a smartphone in order to perform your jobs duties, the smartphone is a work tool. This must be supplied by the employer if requested. In practice, our company offers two choices if your position requires this. For one, you can be issued a company owned and managed phone. This phone is registered with the MDM and the MDM manages the installed software. Additionally, because the MDM can wipe the work phone after loss or theft, company data may actually be stored on the phone. The drawback is that you now have two phones. Alternatively, there is a small number of use cases authorized to be done on personal phones with basic security enabled. For example, access to mails with a web browser, an authorized messaging client, or a TOTP MFA application, like google authenticator. These are fine, because they either don't store company data on the phone, or because they are not critical on their own. You can have my MFA token generator, because you don't have my password, for example. So for example, personally speaking, I have to have a TOTP app around, a messaging app - threema for work - installed due to on-call and maybe duo in the near future. I consider those reasonable, especially because I have a TOTP app and something for oncall anyway. Or used to. RIP Firealert :( However, once I'm supposed to install teams, outlook or some of these, I'd balk.