Certified Information Privacy Professional – Europe (CIPP/E) — Question 152

Why is advisable to avoid consent as a legal basis for an employer to process employee data?

Answer options

• A. Employee data can only be processed if there is an approval from the data protection officer.
• B. Consent may not be valid if the employee feels compelled to provide it.
• C. An employer might have difficulty obtaining consent from every employee.
• D. Data protection laws do not apply to processing of employee data.

Correct answer: B

Explanation

The correct answer is B because if an employee feels pressured to give consent, that consent cannot be considered valid under data protection regulations. Options A and D are incorrect as they misinterpret the role of data protection officers and the applicability of data protection laws. Option C, while a potential challenge, does not address the inherent issues with consent under duress.