So what does this have to do with the GDPR?

One common reason for GDPR fines is that an unencrypted device was used to store personal data.

This device doesn’t have to be a computer. It could also be a memory stick, an SD card, or a mobile phone.

If a device holding personal data gets lost, this could be met with a fine.

However, if the device is properly encrypted, the ICO will almost certainly be more lenient.