CDPSE: Certified Data Privacy Solutions EngineerDemo

By Isaca · Question Mode

QuestionQ408

Privacy Governance

A multinational organization plans to establish global communications management to monitor the appropriate use of corporate email accounts. Which of the following is the BEST approach for an IT privacy practitioner when implementing this process?

  • A Inform employees of the monitoring via email.
  • B Include monitoring information in employee onboarding training.
  • C Update the company privacy policy to include monitoring information.
  • D Obtain employee acknowledgment and consent.
Explanation

A formal privacy-policy update documents the purpose and scope of email monitoring and provides transparent, consistent notice to employees. Employee consent is usually not the preferred legal basis for workplace monitoring because of the power imbalance in employment relationships; informal email notices or onboarding training are less comprehensive policy controls.

Community Discussion

No comments yet. Be the first to start the discussion!