Lots of workplaces allow reasonable personal use.

The problem from IT security point of view is what is "reasonable" and how it impacts internal systems if the laptop gets used as attack vector.