nerdexam
IAPP

CIPP-US · Question #63

Which of the following best describes an employer's privacy-related responsibilities to an employee who has left the workplace?

The correct answer is D. An employer has a responsibility to maintain the security and privacy of any sensitive employment. Employers have a duty to protect the personal information of their current and former employees, as well as applicants, from unauthorized access, use, or disclosure. This duty may arise from federal or state laws, such as the Fair Credit Reporting Act (FCRA), the Health Insurance

Workplace Privacy

Question

Which of the following best describes an employer's privacy-related responsibilities to an employee who has left the workplace?

Options

  • AAn employer has a responsibility to maintain a former employee's access to computer systems
  • BAn employer has a responsibility to permanently delete or expunge all sensitive employment
  • CAn employer may consider any privacy-related responsibilities terminated, as the relationship
  • DAn employer has a responsibility to maintain the security and privacy of any sensitive employment

How the community answered

(38 responses)
  • A
    8% (3)
  • B
    13% (5)
  • C
    3% (1)
  • D
    76% (29)

Explanation

Employers have a duty to protect the personal information of their current and former employees, as well as applicants, from unauthorized access, use, or disclosure. This duty may arise from federal or state laws, such as the Fair Credit Reporting Act (FCRA), the Health Insurance Portability and Accountability Act (HIPAA), or the California Consumer Privacy Act (CCPA), or from contractual obligations, such as non-disclosure agreements or privacy policies. Employers may retain sensitive employment records, such as performance evaluations, disciplinary actions, medical records, or background checks, for a legitimate business purpose, such as complying with legal requirements, defending against lawsuits, or conducting audits. However, employers must ensure that these records are stored securely, accessed only by authorized personnel, and disposed of properly when no longer needed.

Topics

#former employees#employment records retention#post-employment obligations#data security

Community Discussion

No community discussion yet for this question.

Full CIPP-US Practice