What to do if…
you are told your work devices will be remotely wiped and you still need personal data off them
Short answer
Contact IT/HR right now and request a brief hold or supervised export of only your personal items using an approved method. Do not try to evade management controls or copy mixed work content in a rush.
Do not do these things
- Do not copy company/confidential files “for leverage” or “just in case”.
- Do not use unapproved routes like personal email, personal cloud drives, AirDrop, or personal USB devices unless IT explicitly approves it / policy allows it.
- Do not disable MDM, tamper with security settings, or attempt to block the wipe.
- Do not delete messages, tickets, or files to “clean up” before the wipe.
- Do not assume anything will be recoverable later (a wipe is intended to make data access infeasible).
What to do now
- Get clarity on what’s about to happen. Capture the notice (photo/screenshot) and confirm: which device(s), the exact deadline, and whether it’s a full wipe or a selective/work-profile wipe.
- Define “personal data” in a narrow list. Examples: personal photos, personal contacts saved locally, personal documents you created, personal browser bookmarks, personal certificates. Avoid anything that looks like work product.
- Ask for a compliant export — with a concrete proposal. Contact the service desk and request:
- a short delay (even an hour helps),
- a supervised export of named folders/apps,
- delivery via an approved channel (IT-provided encrypted USB, secure transfer link, or an approved personal destination if policy permits).
- Secure your personal accounts first. If you ever signed into personal accounts on the work device:
- sign out where you can,
- change passwords from a separate trusted device,
- remove the work device from “devices/sessions” in those accounts. If you used this device for 2-factor codes or password storage, make sure you have recovery access (backup codes/alternate method) before the wipe.
- Pull key employment documents from official portals (not from the device drive). Download what you may need later while you still have access (where available): pay stubs, W-2 access instructions, benefits/enrollment confirmations, retirement plan info, training certificates, performance reviews, offer letter/contract.
- Put your request in writing, calmly. Send a short email/ticket: what personal items you’re requesting, the wipe deadline, and your suggested compliant method (supervised export).
- If you’re in California, consider a privacy “right to know/access” request — but only if your employer is covered and offers a request channel. Many covered employers provide a webform, email, or other method for privacy requests. If this applies, keep the request specific (your identifiers, date ranges, and “employment/HR records”) and use the employer’s stated process.
What can wait
- You don’t need to decide today whether to threaten a lawsuit, quit, or post about this publicly.
- You don’t need to write a long explanation or argue the fairness of the wipe right now.
- You don’t need to perfectly organize everything — focus only on a small set of personal items you truly cannot replace.
Important reassurance
A small amount of personal material ending up on a work device is common. Remote wipes are often routine security/offboarding steps. A narrow, policy-compliant request for supervised export of personal items is reasonable — and moving quickly and calmly improves your odds.
Scope note
These are first steps to prevent irreversible loss and avoid escalating the situation. If this is connected to discipline/termination, investigations, or legal claims, get jurisdiction-specific advice before you take any extra actions beyond a narrow personal-data request.
Important note
This is general information, not legal advice. Rules vary widely by employer policy, device ownership (company-issued vs BYOD), and state law. Treat the device as company property, keep your request tightly focused on personal items, and use official HR/IT channels.