CIPP/E: Certified Information Privacy Professional/EuropeDemo

By IAPP · Question Mode

QuestionQ255

Compliance with European Data Protection Law and Regulation

What monitoring may lawfully be conducted within the scope of Gentle Hedgehog’s business?

  • A Everything offered by Sauron Eye's software with the exception of camera and microphone monitoring.
  • B Everything offered by Sauron Eye's software, assuming employees provide daily consent to the monitoring.
  • C Only video calls conducted during business hours and emails that do not contain a “private” or “personal” tag.
  • D Only emails, website browsing history and camera for internal video calls that are expressly marked as monitored.
Explanation

Employee monitoring must be lawful, fair, transparent, and restricted to data that are necessary for a specified business purpose. Covert, continuous, or indiscriminate surveillance—including 24/7 audio/video access, keystroke logging, and facial-recognition verification—is disproportionate; employee consent does not ordinarily cure this imbalance of power. Limited monitoring of work emails and browsing history, together with clearly identified monitoring of internal video calls, is the proportionate and transparent scope described.

Learn more

Community Discussion

No comments yet. Be the first to start the discussion!