Certified Information Privacy Professional – Europe (CIPP/E) — Question 153

What is true if an employee makes an access request to his employer for any personal data held about him?

Answer options

• A. The employer can automatically decline the request if it contains personal data about a third person.
• B. The employer can decline the request if the information is only held electronically.
• C. The employer must supply all the information held about the employee.
• D. The employer must supply any information held about an employee unless an exemption applies.

Correct answer: D

Explanation

The correct answer is D because employers are generally required to provide access to personal information unless specific exemptions are met. Option A is incorrect as the employer cannot simply decline due to third-party data; they must assess the request. Option B is also incorrect since the medium of storage (electronic or otherwise) does not affect the obligation to provide access. Option C is misleading because the employer is not obligated to provide all information if exemptions apply.