Certified Information Privacy Professional – Europe (CIPP/E) — Question 76

For which of the following operations would an employer most likely be justified in requesting the data subject’s consent?

Answer options

• A. Posting an employee’s bicycle race photo on the company’s social media.
• B. Processing an employee’s health certificate in order to provide sick leave.
• C. Operating a CCTV system on company premises.
• D. Assessing a potential employee’s job application.

Correct answer: A

Explanation

The correct answer is A because sharing personal photos on social media typically requires explicit consent from the individual. Options B, C, and D involve processing information or systems that are generally within the employer's rights to manage for operational or legal reasons, thus may not require consent.