Regardless of industry or profession, all organizations are obligated to protect the privacy of their businesses, employees, customers, consumers, suppliers, and other internal and external parties. To that end, best practices call for the establishment of a confidential and sensitive information policy and training program for work-at-home and remote employees. This policy governs the acquisition, use, disclosure, retention, and deletion of critical business information, private personal data, and other business records. It should apply to hard-copy documents, verbal conversations, and electronic communications conducted via employer-provided and personally owned systems, sites, accounts, and devices used by remote workers. Online training should emphasize the fact that this policy applies 24/7/365, regardless of whether one is working at the office, from home, or elsewhere.