What you need to know
Installing Microsoft Intune Company Portal does not automatically give an employer access to personal messages, photographs, passwords, contacts, calendar entries, documents, or browsing and call history. What information technology administrators can see depends on the ownership and enrollment method, but enrolled-device details normally include the device name, model, manufacturer, serial number, operating-system version and ownership record.
Key facts
- ✓Microsoft states that organisations cannot see personal email or text messages, contacts, calendars, passwords, photographs, user-created documents, or web and calling history through Intune enrollment.
- ✓Administrators can see basic enrolled-device information such as the owner, device name, serial number, model, manufacturer, operating system and version, and International Mobile Equipment Identity (IMEI).
- ✓On a personal device, the organisation can see managed work or school apps. Visibility can vary with the enrollment method and policies chosen by the organisation.
- ✓For personal phones, Microsoft says the organisation can see the last four digits of the phone number; corporate-owned device visibility is different.
- ✓The organisation can apply security requirements to work access and remove managed work data when the device is unenrolled.
Recommended actions
- ✓Ask the employer for its bring your own device (BYOD) and privacy notice before enrollment.
- ✓Confirm that the device is recorded as personally owned in Company Portal.
- ✓Use an Android work profile or managed-app protection where available to maintain a clearer separation between work and personal data.
- ✓Review the permissions requested during enrollment and contact the information technology (IT) administrator if the purpose is unclear.
Expected benefits
✓More transparent bring your own device decisions
✓Clearer separation of work and personal data
✓Fewer privacy misunderstandings