How to Protect Customer Data on a Work Tablet

Set a screen lock, check encryption is on, sign the tablet into an account that can find and lock it remotely (and wipe it, on Android), and keep customer details in a cloud app rather than in files on the device.

Do those four things on day one. A lost or stolen tablet is then much harder for anyone to read, and you will have the facts to hand if you have to decide whether to report it.

The screen lock and encryption settings are built into the operating system, and find-and-lock needs a free Google or Microsoft account. Set all of this up before the device goes missing, because you cannot switch on remote lock once it is gone.

What Is Actually on a Work Tablet

A work tablet holds more than a few job sheets. It usually has:

• Customer names, addresses, phone numbers and email addresses, in your job management app, your email and your contacts.
• Photos of the inside of people's homes and businesses, often showing alarm panels, meter cupboards, keys on hooks and the layout of the property.
• Signatures, quotes, invoices and bank details for people who have paid you.

All of it is personal data about your customers. Even if the thief only wants the hardware, anyone who gets past a weak lock can read what is on it.

UK GDPR in Plain English

This is signposting, not legal advice. If you need a definite answer about your own situation, the Information Commissioner's Office (ico.org.uk) publishes guidance written for small businesses, and that is the place to start.

The basics as they apply to a tradesperson:

• Check whether it applies to you. UK GDPR covers information about identifiable people that a business holds, which can include a sole trader's customer list. The ICO's guide for small organisations (ico.org.uk) will help you confirm it.
• You have to keep it secure. The law asks for security that is appropriate to the risk. What that means for your business is a judgement for you, so read the ICO's guidance on security (ico.org.uk). A screen lock and encryption are the sensible starting point.
• A lost device can be a personal data breach. A lost or stolen device holding personal data can be a personal data breach, even if nobody reads the data. Whether you must report it to the ICO, within 72 hours of becoming aware of it, depends on the risk to the people affected, so check the ICO's guidance on personal data breaches (ico.org.uk).

Step 1: A Screen Lock You Will Actually Keep On

The screen lock is the foundation. Encryption and remote wipe both depend on it.

People switch locks off because of friction. Typing a six digit PIN with cold hands, again and again, gets old by Tuesday. So choose settings you will live with:

• Use a PIN of at least six digits or a proper password, not a swipe pattern, which is easy to watch over your shoulder.
• Set the auto lock to a short delay, a minute or two, not thirty minutes.
• Add a fingerprint if the device has a reader. It makes a strong PIN easier to live with.

In our range, a fingerprint sensor is listed on the Tuga A6, which also lists face unlock, and on the Tuga W8. On the Tuga W10 a fingerprint reader is an option rather than standard. The A8, A10 and WH6 do not list one, so on those you are unlocking with a PIN or password every time. Treat face unlock as a convenience that sits in front of a good PIN, not a replacement for one.

Step 2: Check Encryption Is On

Encryption scrambles everything stored on the device so that it is unreadable without the screen lock. Without it, someone can pull the storage out and read your files without ever seeing the lock screen.

Android. Recent versions of Android encrypt internal storage as standard, with the screen lock protecting the key. Confirm it under Settings, then Security, where the wording varies from device to device.

Windows 11. Look in Settings under Privacy and security for Device encryption, or search the Start menu for BitLocker. Switch it on and save the recovery key somewhere that is not the tablet. Whether the option appears depends on the edition and the hardware, so check it on the tablet you buy before you rely on it, and ask us if you cannot find it.

The microSD card. A card used as portable storage is usually not encrypted, so anyone can pull it out and read it in a laptop. Keep customer data off it, or encrypt it separately.

Step 3: Set Up Find and Lock Before You Need Them

Both operating systems can locate a lost device and lock it from another computer, but only if it was switched on beforehand and the tablet gets online to receive the command.

Android: Google's Find My Device (called Find Hub on up to date devices). Sign the tablet into a Google account, turn location on, and check that Find My Device is enabled in the security settings. From any browser you can then see where the tablet is, make it ring, lock it with a message and phone number on the screen for whoever finds it, or erase it completely. Check it works on the device you buy by testing it once from your phone while the tablet is next to you. Our product pages list Android 14 but do not list Google services, so confirm Google sign-in and Find My Device work on the model you choose, or ask us, before you rely on them.

Windows 11: Find my device. Sign in with a Microsoft account and turn on Find my device under Settings, Privacy and security. It can locate the tablet and lock it with a message on the screen, but it does not wipe it. Full remote wipe on Windows comes with mobile device management (MDM) tools, which our guide to whether you need an enterprise rugged tablet says only start to pay off at fleet scale, so for one or two devices rely on encryption and password changes. The WH6 runs Windows 11 IoT rather than Pro, so check that Find my device and encryption appear on it before you rely on them.

Connectivity decides whether the command arrives. The A6 has 5G, the A8, WH6 and W8 have 4G LTE, the A10 has dual SIM 4G, and the W10 has 4G LTE only as an option. A device with a SIM still needs an active plan and a signal, and one without mobile data needs a Wi-Fi network it already knows.

Step 4: Keep Less on the Device

The cheapest protection is not having the data there in the first place.

• Use apps that store in the cloud. Many job management, quoting and invoicing apps keep the customer record on their servers. Lose the tablet, sign in on another one, carry on. Local spreadsheets and PDF folders are the opposite: whoever has the tablet has everything.
• Back photos up to a business account. Set photos to sync to an account the business controls, not a personal one, then clear old jobs off the device now and again.
• Keep codes out of the notes app. Gate codes, key safe numbers and alarm codes belong in a password manager, which encrypts them separately and locks on its own timer.

Check that the apps you plan to use run on the device you are considering. Our Android or Windows guide covers how to work that out.

The First Hour After It Goes Missing

Do these in order, from your phone or any computer:

1. Try to locate and lock it. Use Find My Device on Android or Find my device on Windows, and put a contact number on the lock screen. Lost tablets are sometimes picked up by people who would return them if they could.
2. Change the passwords that matter. Email first, because it resets everything else, then your job software, accounts package and supplier accounts. Sign out of all other sessions where the service offers it.
3. Ring your mobile provider. If the device has a SIM, ask them to bar it.
4. Write down what was on it. Which customers, what sort of information, whether it was locked and encrypted, and when you noticed.
5. Wipe it if it is not coming back. On Android, erase it through Find My Device. Google says a remote erase may not clear a microSD card, so this is another reason to keep customer data off the card in the first place. On Windows, rely on encryption and the password changes above.
6. Decide whether it needs reporting. Check the ICO guidance on personal data breaches at ico.org.uk. The ICO's guidance explains the reporting deadline and when you also have to tell the people affected, so read it the same day rather than leaving it.
7. Report a theft to the police and get a crime reference number for your insurer.

Selling It, Passing It On or Scrapping It

The end of a tablet's life is the other point where customer data leaks. Before a device leaves your hands, back up what you need, sign out of every account, then do a full factory reset from the settings menu. On Android, a factory reset on an encrypted device discards the encryption key. On Windows, use Settings, System, Recovery, Reset this PC, choose Remove everything and then the option to clean the drive. Pull the SIM and the microSD card.

Tuga Devices With a Fingerprint Reader

• Tuga A6, £299. Android 14, fingerprint sensor and face unlock. Connectivity is 5G and Wi-Fi 5, so a remote lock command can reach it on mobile data (with an active SIM plan) or on Wi-Fi.
• Tuga W8, £629. Windows 11 Pro with a fingerprint sensor and 4G LTE, for firms whose software only runs on Windows.
• Tuga W10, from £649. Windows 11 Pro. The fingerprint reader and 4G LTE are listed as options, so ask us about availability and price before you order.

Prices have no VAT to add, and delivery is free to UK addresses in 7 to 10 working days.

Switching on the lock, encryption and find-and-lock settings takes minutes on the day the tablet arrives. If you are still weighing a rugged device against a consumer one, our true cost comparison covers the cost of losing job records that were never backed up.