Certified Information Privacy Professional – Europe (CIPP/E) — Question 180

A worker in a European Union (EU) member state has ceased his employment with a company. What should the employer most likely do in regard to the worker’s personal data?

Answer options

• A. Destroy sensitive information and store the rest per applicable data protection rules.
• B. Store all of the data in case the departing worker makes a subject access request.
• C. Securely store the data that is required to be kept under local law.
• D. Provide the employee the reasons for retaining the data.

Correct answer: C

Explanation

The correct answer is C because employers are required to securely store personal data that must be retained in compliance with local laws. Option A is incorrect as it suggests destroying data that may still be legally required to retain. Option B is not appropriate since it advises keeping all data unnecessarily. Option D does not address the legal obligations for data retention.