Per order from our Department of Computer Security:
Staff should follow the Data Protection Law by not connecting a flash drive with personal data of clients to a computer with Windows OS that has access to internet, wired or Wi-Fi. That does not apply to computers with Linux or Mac OS.
Is this correct that this difference exists and data from hard drives or flash drives can leak to internet on Windows OS if such a computer has hidden malware software running on it? There is no such risk for UNIX systems due to different architecture?