Handing out company phones with no policy is like handing out keys and not writing down who has them. It works fine, right up until a phone is lost, a bill triples after a holiday, or someone leaves and nobody is sure what happens to the device. A short, clear mobile policy heads all of that off. Here is what to put in one, with a checklist you can lift straight into your own.
Why bother with a policy?
A mobile policy is not red tape; it is the thing that prevents arguments and nasty surprises. It sets expectations on how phones are used, keeps your data protected, makes costs predictable, and means that when someone leaves there is a clear, calm process rather than a scramble. It is not a legal requirement, but given that company phones carry customer data, it is a sensible part of taking data protection seriously.
What a good policy covers
Keep it short and readable, but make sure it touches each of these:
- Acceptable use. What the phone is for, and how much personal use is reasonable.
- Security. A passcode, automatic updates, device management, and no tampering with the phone’s security.
- Data protection. How customer data is handled, which apps are allowed, and care on public Wi-Fi.
- Costs. What the business covers, the rules on roaming abroad, and what counts as excessive personal use.
- Lost or stolen. Report it immediately so the device can be locked or wiped.
- Leavers. The device comes back, the data is removed, and the SIM and number stay with the business.
- Ownership. Who owns the handset and, importantly, the number.
Your company mobile policy checklist
- Acceptable use, including reasonable personal use, is defined
- A passcode or biometric lock is required on every device
- Security updates must be installed, and device management is in place
- Rules for handling customer and company data are set out
- Roaming rules are clear, and staff tell us before travelling abroad
- Spend limits and barring are explained, so bills stay predictable
- Lost or stolen phones must be reported immediately
- It is clear the business owns the SIM and the number
- A leavers process covers returning the device and removing data
- If BYOD is allowed, it states what is managed and what stays private
- Every user signs to confirm they have read and understood it
A policy nobody reads is useless. Keep it to a page or two in plain language, get people to sign it when they are handed a phone, and revisit it when things change. Short and understood beats long and ignored.
The parts people forget
Two sections are routinely left out and cause the most grief later. The first is roaming: a clear rule that staff tell you before they travel means you can sort a bundle and adjust limits rather than meet a shock bill, which we cover in telling us before you travel. The second is number ownership: spelling out that the business owns the number avoids the problem of customers following a leaver out of the door, as we explain in who owns the number when an employee leaves. If you allow personal devices, the policy should also set the ground rules for BYOD.
Frequently asked questions
Do I legally need a company mobile phone policy?
No, it is not a legal requirement. But because company phones carry personal and customer data, a policy is strongly recommended as part of good data protection, and it saves a lot of avoidable disputes over use, cost and what happens when staff leave.
What should a mobile phone policy include?
Acceptable use, security requirements, data handling, cost and roaming rules, a lost-or-stolen process, a leavers process, and clear ownership of the device and number. The checklist above covers the essentials you can drop into your own.
Can we restrict personal use on a company phone?
Yes. Most policies allow reasonable personal use while setting limits and reserving the right to manage the device. The key is to be clear and consistent so everyone knows where they stand.
Does the policy apply to personal phones used for work?
It should. For BYOD, the policy needs to state what is managed, what the business can and cannot see, and what happens to work data when someone leaves. That clarity is what makes BYOD safe to allow.
How Synergy Max helps
We help you shape a policy that matches how you actually run your business mobiles, then put the technology behind it: device management to enforce security, business SIMs so numbers stay with you, aggregated data and spend limits to keep bills predictable, and roaming controls for travellers. A policy is only as good as your ability to enforce it, and that is the part we handle.