Certified Information Privacy Professional – United States (CIPP/US) — Question 199

In the U.S., it is a best practice (and in some states a requirement) to conduct a data protection assessment in which instance?

Answer options

• A. When a background check is used as part of the hiring process.
• B. When any information is processed by a corporation.
• C. When trade secrets are shared with a third party.
• D. When technology is used to monitor employees.

Correct answer: D

Explanation

The correct answer is D because monitoring employees through technology raises significant privacy concerns, necessitating a data protection assessment to safeguard personal data. Options A, B, and C, while important, do not typically require a formal assessment under the same level of scrutiny as employee monitoring does.