CIPP/C: Certified Information Privacy Professional/Canada

By IAPP · Question Mode

QuestionQ23

Canadian Privacy Laws and Practices in the Private Sector

A company intends to invest in DEI initiatives across its organization and plans to survey employees by asking for locality, age, salary, gender, ethnicity, religion, sexual orientation, physical/mental disabilities, department, and job level.

What is the best solution for protecting the personal information collected through the survey?

Explanation

The strongest privacy protection is data minimization: avoid collecting information that can identify or re-identify employees. A combination of demographic, location, department, and job-level details can reveal an individual even without a name. Encryption and pseudonyms reduce certain risks but still leave sensitive personal data collected and potentially linkable.

Community Discussion

No comments yet. Be the first to start the discussion!