I used to work for an American startup that dealt with quite some PII. We were forbidden from traveling to a laundry list of countries with work devices and wer

I used to work for an American startup that dealt with quite some PII. We were forbidden from traveling to a laundry list of countries with work devices and were required (expected? I am not sure now) to inform the company if we travel to those countries even w/o work devices.