Certified Information Privacy Professional Employment Privacy 2 — Questions and Answers
Question 1: Which federal law requires employers to keep I-9 employment eligibility verification forms and prohibits using them for discriminatory purposes?
- Immigration Reform and Control Act (IRCA) (Correct answer)
- Privacy Act of 1974
- HIPAA
- FERPA
Correct answer: Immigration Reform and Control Act (IRCA)
IRCA requires employers to verify employment eligibility via I-9 forms and prohibits discriminatory use of this verification process.
Question 2: Under the ADA, when may an employer require an employee to undergo a medical examination?
- Only when job-related and consistent with business necessity (Correct answer)
- At any time for any reason
- Only during annual performance reviews
- Only when the employee requests it
Correct answer: Only when job-related and consistent with business necessity
ADA restricts post-hire medical examinations to situations where they are job-related and consistent with business necessity, such as when an employee's ability to perform job functions is in question.
Question 3: Which privacy concern arises when employers use social media screening of job applicants?
- Exposure to legally protected characteristics not visible during the interview process (Correct answer)
- Violation of the Electronic Communications Privacy Act for all social media checks
- FCRA requirements apply to all social media screening
- Social media screening is fully protected by the First Amendment
Correct answer: Exposure to legally protected characteristics not visible during the interview process
Social media profiles often reveal protected characteristics like religion, race, age, or disability, creating potential discrimination liability if this information influences hiring decisions.
Question 4: What is a key requirement under the FCRA when an employer uses a third-party vendor to conduct social media background screening?
- The vendor's report is a consumer report subject to FCRA, requiring disclosure and authorization (Correct answer)
- No special requirements apply to social media screening
- Only written authorization from the applicant is required
- The employer must file the report with the FTC
Correct answer: The vendor's report is a consumer report subject to FCRA, requiring disclosure and authorization
When third-party vendors compile social media information into reports for employers, those reports are consumer reports under FCRA, triggering full FCRA obligations.
Question 5: Under GINA (Genetic Information Nondiscrimination Act), employers are prohibited from:
- Using genetic information in employment decisions and requiring or requesting genetic information (Correct answer)
- Offering voluntary wellness programs that include genetic testing
- All health insurance coverage for employees with genetic predispositions
- Disclosing genetic information to government agencies
Correct answer: Using genetic information in employment decisions and requiring or requesting genetic information
GINA prohibits employers from using genetic information in hiring, firing, or any employment decisions and from requesting or requiring employees to provide genetic information.
Question 6: What must an employer's acceptable use policy for workplace technology typically address to protect against employee privacy claims?
- Notice that monitoring may occur and there is no expectation of privacy on employer systems (Correct answer)
- A complete list of banned websites
- Employee financial compensation for monitoring
- Third-party audits of all monitoring activities
Correct answer: Notice that monitoring may occur and there is no expectation of privacy on employer systems
Clearly communicating that there is no expectation of privacy on employer systems reduces employee privacy claims and establishes the employer's right to monitor.
Which federal law requires employers to keep I-9 employment eligibility verification forms and prohibits using them for discriminatory purposes?