CIPP/US Workplace Privacy & Employee Monitoring 3

Question 1

Under HIPAA, how must an employer handle employee health information obtained through a self-insured health plan?

Accepted Answer

It must be kept separate from other personnel records and accessed only by those who need it to administer the plan

Answer

HIPAA requires employers who sponsor self-insured health plans to maintain health information separately and limit access to plan administration personnel only.

Question 2

An employee notifies their manager of a disability and requests a reasonable accommodation. Under the ADA, the employer's privacy obligation regarding this disclosure is to:

Accepted Answer

Keep the medical information confidential and share it only with those who have a specific need to know on a need-to-know basis

Answer

The ADA requires that medical information obtained through the accommodation process be kept confidential and disclosed only to those with a legitimate need to know.

Question 3

Which of the following is the best practice when an employer wants to implement video surveillance of the workplace?

Accepted Answer

Provide employees with advance notice of the surveillance through a written policy, avoiding placement in areas where employees have a heightened expectation of privacy such as restrooms

Answer

Best practice requires advance notice to employees and avoidance of locations (restrooms, changing rooms) where employees retain a reasonable expectation of privacy, balancing business interests with employee rights.

Question 4

What is the primary purpose of an employee privacy notice under the California Consumer Privacy Act (CCPA) as amended by the CPRA?

Accepted Answer

To inform employees about the categories of personal information collected about them and the purposes for which it is used

Answer

The CPRA requires employers to provide a privacy notice at or before collection informing California employees about the categories of personal information collected and the purposes of use.

Question 5

An employer conducts an internal investigation of an employee suspected of misconduct. From a workplace privacy perspective, which approach best balances employer and employee interests?

Accepted Answer

Limiting the investigation to relevant evidence, informing only those with a need to know, and documenting the process to demonstrate proportionality

Answer

A proportionate, confidential investigation that collects only relevant evidence and limits disclosure to those with a need to know minimizes privacy risk while serving legitimate business interests.

CIPP/US - Certified Information Privacy Professional/United States Exam Practice Test

CIPP/US - Certified Information Privacy Professional/United States Exam Practice Test

CIPP/US Workplace Privacy & Employee Monitoring 3