Certified Information Privacy Professional – Asia (CIPP/A) — Question 88

SCENARIO – Please use the following to answer the next question:
Singabank is a boutique bank in Singapore. After being notified during the hiring process, Singabank employees are subject to constant and thorough monitoring and tracking through CCTV cameras, computer monitoring software and keyboard loggers. Singabank does this to ensure its employees are complying with Singabank's data security policy. Bigbank is now considering acquiring Singabank's retail banking division. As part of its due diligence, Bigbank is seeking for Singabank to disclose to it all of its surveillance material on its employees, whether or not they are part of the retail banking division. Jimmy works in Singabank's investment banking division.
What would make Singabank's monitoring of its employees illegal?

Answer options

• A. If the employees did not explicitly consent to it.
• B. If the bank's data security policy was being overhauled.
• C. If the bank collected employees' sensitive personal information.
• D. If the employees were not provided contact information to ask questions about the monitoring.

Correct answer: A

Explanation

The correct answer is A because, in many jurisdictions, employee monitoring requires explicit consent from the employees to be considered legal. The other options, while potentially concerning, do not directly address the legality of the monitoring itself. For example, updating a data security policy or collecting sensitive information without consent could be issues, but they do not inherently make the monitoring illegal.