CIPP/E PRIVACY QUESTIONS WITH CORRECT ANSWERS|100% verified

CIPP/E PRIVACY QUESTIONS WITH CORRECT ANSWERS Legal basis for processing employee personal data CORRECT ANSWER (1) consent, (2) Processing is necessary to fulfil an employment contract, (3) Processing is necessary for a legal obligation, (4) Legitimate interests. Workplace monitoring CORRECT ANSWER EU law recognizes that an employee's privacy sphere in the workplace is protected. The right to privacy should be balanced again the legitimate rights of an employer to operate its business and protect the company. Employee monitoring CORRECT ANSWER The employer should ensure compliance with data protection principles (1) Necessity, (2) Legitimacy, (3) Proportionality, (4) Transparency. Employee monitoring CORRECT ANSWER employees must be informed of the monitoring. The employee's expectations about how their time at work will be monitored must be set. Employers should introduce an 'acceptable use policy' (AUP). 29 WP: no covert e-mail monitoring is allowed by employers except in cases permitted by local law. The employee should be notified immediately of the detection of misuse unless there is an important reason to justify the surveillance without notifying the individual. Rights of the accuses employee CORRECT ANSWER present the facts and provide an opportunity to explain his or her behavior. Sarbanes-Oxley act of 2002 (SOX) CORRECT ANSWER aim is to ensure that company and accounting decision making is more responsible and accountable. Companies must establish a way to confidentially receive and deal with complaints about actual or potential fraud. EU limits the use of personal data in these circumstances due to the potential prejudice to individuals. The concern is that the subject has no right of reply to the person making the allegation. Surveillance activities CORRECT ANSWER Two broad categories: (1) surveillance carried out by public law enforcement authorities (LEAs) in the course of investigations and (2) surveillance carried out by private entities for legitimate purposes. Main types of electronic communications data CORRECT ANSWER (1). Content of a communication. (2) Traffic data and (3) Location data. The surveillance provisions of e-Privacy Directive CORRECT ANSWER Heavily restricts any form of interception or surveillance of content and the related traffic data conveyed by means of a public ECN and publicly available ECS. Art 5(1) prohibits listening, tapping, storage or other kinds of interception, except when legally authorized.