S 5.78 Protection against mobile phone usage data being used to create movement profiles

Initiation responsibility: IT Security Officer, Head of IT

Implementation responsibility: User

For mobile communication, it must be possible for technical reasons to locate the mobile communication partners in order to be available. If the devices establish a connection themselves, they also provide information on their location - in the course of establishing the connection. This location information may be used by the network operator or service operator - but possibly also by third parties - to form person- or device-related "movement profiles".

If the generation of movement profiles during the use of mobile phones is considered a threat, the mobile phones and also the SIM cards should be exchanged frequently amongst the employees, if feasible. This way, assigning the devices and cards to a certain user is at least made more difficult.

If the location at a certain point in time should remain undiscovered, the only way to achieve this is to switch off the mobile phone. In order to be absolutely sure, the battery should be removed.