So at my work the IT department is setting up a new multifactor authentication system. In order for us to have access to programs we need to work were told we have to download an app on our personal phones to use the multifactor system.
Is this legal to be be forced to download an app on our personal phones?
I live in California if that helps.