IAPP CIPP/A Exam - Topic 2 Question 89 Discussion

Actual exam question for IAPP's CIPP/A exam

Question #: 89
Topic #: 2

SCENARIO -- Please use the following to answer the next QUESTION:

Singabank is a boutique bank in Singapore. After being notified during the hiring process, Singabank employees are subject to constant and thorough monitoring and tracking through CCTV cameras, computer monitoring software and keyboard loggers. Singabank does this to ensure its employees are complying with Singabank's data security policy. Bigbank is now considering acquiring Singabank's retail banking division. As part of its due diligence, Bigbank is seeking for Singabank to disclose to it all of its surveillance material on its employees, whether or not they are part of the retail banking division. Jimmy works in Singabank's investment banking division.

What would make Singabank's monitoring of its employees illegal?

AIf the employees did not explicitly consent to it.

BIf the bank's data security policy was being overhauled.

CIf the bank collected employees' sensitive personal information.

DIf the employees were not provided contact information to ask Question:s about the monitoring.

Show Suggested Answer

Suggested Answer: A

by Lavera at Jan 05, 2026, 05:16 AM

Limited Time Offer

25%

Off

Get Premium CIPP/A Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Craig

19 days ago

Haha, Singabank must be really paranoid if they're monitoring their employees' keystrokes. Option C is the way to go.

upvoted 0 times

...

Jonell

24 days ago

I agree, option A is the best answer. Employees shouldn't be subject to surveillance without their knowledge and approval.

upvoted 0 times

...

Luisa

29 days ago

Option A seems correct. Employees should have the right to privacy and consent to any monitoring.

upvoted 0 times

...

Daryl

1 month ago

I don't recall much about the specifics of data security policies, but I think option D could be relevant if employees weren't informed about the monitoring. It seems like a potential issue.

upvoted 0 times

...

Glenn

1 month ago

I practiced a similar question where consent was a key factor. I feel like option A is the strongest choice here, but I wonder if there are other legal aspects we should consider.

upvoted 0 times

...

Leah

1 month ago

I'm not entirely sure, but I remember something about sensitive personal information being a big deal. So maybe option C could be a reason for illegality?

upvoted 0 times

...

Eric

2 months ago

I think option A makes sense because consent is crucial for any monitoring to be legal. If employees didn't agree, that could definitely be a violation.

upvoted 0 times

...

Derick

2 months ago

This is a tough one. There are a few different factors at play - the consent of the employees, the bank's data security policy, and the type of information being collected. I'll need to carefully weigh each option and think about the legal implications to determine the best answer.

upvoted 0 times

...

Brice

2 months ago

I feel confident I can tackle this one. The scenario clearly states the employees are subject to constant monitoring, so the key is whether that violates their rights or privacy. I think option C about collecting sensitive personal info is the most relevant factor here. I'll explain that in my answer.

upvoted 0 times

...

Doyle

2 months ago

Okay, let me think this through. I'm pretty sure the correct answer has to do with the employees' personal information being collected. If the bank is gathering sensitive data without proper consent, that would likely be illegal. I'll focus on that angle when answering.

upvoted 0 times

...

Leslee

2 months ago

Hmm, this is a tricky one. I think the key here is whether the employees consented to the monitoring. If they didn't explicitly agree to it, that could make it illegal. But I'm not certain about the other options - I'll need to analyze them more closely.

upvoted 0 times

...

Bo

3 months ago

I'm not too sure about this one. The scenario seems complex, and I'm not sure what the key factors are that would make the monitoring illegal. I'll need to carefully read through the details and think about the legal implications.

upvoted 0 times

...