I am absolutely certain there are thousands of people working from home with inadequate data protection procedures.
Many people were issued a laptop by their employer back in March and given a VPN password in a real hurry. The government told us to work fom home and they did the best they could. There was no time for the employers who were new to home working to appropriate create policies and procedures, and to date, a huge number of employees are still working from their sofas, bedrooms or shared accommodation.
If I had to work from home I would not be able to create a private space to do so, let alone go to the study!