CIPP/US: Certified Information Privacy Professional/United StatesDemo

By IAPP · Question Mode

QuestionQ169

State Privacy Laws

In the U.S., in which situation is it considered best practice—and, in some states, required—to conduct a data protection assessment?

  • A When a background check is used as part of the hiring process.
  • B When any information is processed by a corporation.
  • C When trade secrets are shared with a third party.
  • D When technology is used to monitor employees.
Explanation

Technology used to monitor employees can involve invasive surveillance, sensitive personal information, and automated profiling. California’s CCPA regulations treat processing employees’ personal information with monitoring technology as presenting a significant privacy risk and require a risk assessment before that processing begins.

Learn more

Community Discussion

No comments yet. Be the first to start the discussion!