What do you hope to achieve by firing him?  Admittedly storing PII on a personal laptop is unacceptable in most places, but I&#x27;m curious:<p>(i) do you have a policy and associated training so that people know what they should and shouldn&#x27;t do,<p>(ii) was this employee ever required to use his personal laptop for company work (e.g. pre-funding)?,<p>(iii) was there ever a time in your company&#x27;s past when you and others would have considered this situation to be OK, at least temporarily?<p>If he&#x27;s doing things the way your company always did things, and hasn&#x27;t been informed that you need to apply a higher standard, then why move immediately to firing him?  Why not just ask him why he&#x27;s storing the data that way, and figure out together how he can do his job whilst accessing the data in a safe way?<p>It&#x27;s not clear whether you&#x27;re trying to<p>(a) set an example for other employees to help ensure compliance with an existing policy,<p>(b) ensure that this particular personal laptop does not become the cause of a leak, or<p>(c) something else?