GPHR Risk Management and Compliance Questions and Answers — Questions and Answers
Question 1: A multinational corporation's legal and moral obligation to protect its global workforce from foreseeable harm, including providing adequate security, health services, and emergency preparedness, is BEST known as:
- Vicarious Liability
- Duty of Care (Correct answer)
- Corporate Social Responsibility
- Risk Mitigation Protocol
Correct answer: Duty of Care
Duty of Care is a legal and ethical obligation requiring an organization to take all reasonable steps to ensure the health, safety, and well-being of its employees, especially those on international assignments. It is a core principle of global risk management, covering everything from health crises and political instability to accidents.
Question 2: A U.S. company's sales manager in a foreign country is pressured to make a small, undocumented payment to a customs official to expedite the release of a standard, legally-compliant shipment. According to the Foreign Corrupt Practices Act (FCPA), this type of payment may be permissible under which narrow exception?
- Bona Fide Business Expense
- Local Law Affirmative Defense
- Facilitating or 'Grease' Payment (Correct answer)
- De Minimis Gift Exemption
Correct answer: Facilitating or 'Grease' Payment
The FCPA includes a narrow exception for 'facilitating' or 'grease' payments made to expedite or secure the performance of a routine, non-discretionary governmental action, such as processing a visa or clearing customs for a legal shipment. It is critical to note this exception is very limited, must be for an action the company is already entitled to, and must be recorded accurately in the company's books.
Question 3: A GPHR professional is overseeing the transfer of employee PII (Personally Identifiable Information) from its subsidiary in Italy to the corporate headquarters in Canada for global talent analytics. Which of the following is the MOST critical compliance framework the GPHR must adhere to for this data transfer?
- The Sarbanes-Oxley Act (SOX)
- The U.S. Privacy Shield Framework
- The General Data Protection Regulation (GDPR) (Correct answer)
- The APEC Cross-Border Privacy Rules (CBPR)
Correct answer: The General Data Protection Regulation (GDPR)
The General Data Protection Regulation (GDPR) governs the processing and transfer of personal data of individuals within the European Union. Transferring data of employees from Italy (an EU member) to a non-EU country like Canada requires strict adherence to GDPR's cross-border data transfer rules, such as ensuring an adequate level of protection or using Standard Contractual Clauses (SCCs).
Question 4: A German company sends an engineer on a two-year assignment to its U.S. subsidiary. The engineer remains on the German payroll for salary and benefits purposes, but the company must still report their income and remit necessary taxes in the United States. The mechanism used to calculate and report these host-country tax obligations without issuing a direct payment is called a:
- Split Payroll
- Tax Equalization Policy
- Hypothetical Tax Calculation
- Shadow Payroll (Correct answer)
Correct answer: Shadow Payroll
A shadow payroll is a parallel payroll process used to calculate and report tax and social security obligations in a host country when an employee is paid from their home country. It 'shadows' the home country payroll for reporting purposes to ensure compliance with host country laws, even though no actual salary is disbursed from it.
Question 5: A GPHR is advising a company on establishing a new manufacturing facility in Germany. A primary consideration for local labor relations and compliance is the potential requirement to engage with a body of elected employees that has co-determination rights on matters such as working hours, social plans, and performance monitoring. This body is known as a:
- Works Council (Correct answer)
- Trade Union
- Grievance Committee
- Supervisory Board
Correct answer: Works Council
In Germany and several other European countries, a Works Council ('Betriebsrat') is a legally mandated body elected by employees to represent their interests at the company level. It has significant co-determination rights, meaning management must consult with or gain agreement from the council on a wide range of personnel and social matters.
Question 6: When developing a global HR risk management framework, which of the following represents the MOST critical foundational step?
- Purchasing travel and evacuation insurance policies.
- Appointing a global crisis management team.
- Conducting a comprehensive risk assessment to identify and analyze threats. (Correct answer)
- Implementing a global compliance training program for managers.
Correct answer: Conducting a comprehensive risk assessment to identify and analyze threats.
The foundational step of any risk management framework is to first identify and analyze the potential risks an organization faces. A comprehensive risk assessment evaluates various threats (e.g., legal, political, security, health) and their potential impact, which then informs all subsequent mitigation strategies like purchasing insurance, forming teams, or developing training.
GPHR Risk Management and Compliance Questions and Answers
A multinational corporation's legal and moral obligation to protect its global workforce from foreseeable harm, including providing adequate security, health services, and emergency preparedness, is BEST known as: