IAPP CIPP/A Exam - Topic 3 Question 75 Discussion

Actual exam question for IAPP's CIPP/A exam

Question #: 75
Topic #: 3

SCENARIO -- Please use the following to answer the next QUESTION:

Singabank is a boutique bank in Singapore. After being notified during the hiring process, Singabank employees are subject to constant and thorough monitoring and tracking through CCTV cameras, computer monitoring software and keyboard loggers. Singabank does this to ensure its employees are complying with Singabank's data security policy. Bigbank is now considering acquiring Singabank's retail banking division. As part of its due diligence, Bigbank is seeking for Singabank to disclose to it all of its surveillance material on its employees, whether or not they are part of the retail banking division. Jimmy works in Singabank's investment banking division.

Assuming the monitoring was legal, can Singabank disclose Jimmy's personal data to Bigbank?

ANo, because Jimmy is not in the division that Bigbank seeks to acquire.

BNo, because the data was collected for the express purpose of complying with Singabank's privacy policies.

CYes, if Singabank informs Jimmy of the disclosure of his personal data before it occurs.

DYes, if Jimmy's personal data is necessary for Bigbank to determine whether to proceed with the acquisition.

Show Suggested Answer

Suggested Answer: C

by Rossana at Jan 26, 2025, 01:45 AM

Limited Time Offer

25%

Off

Get Premium CIPP/A Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Noemi

3 months ago

If it's for compliance, they might have a case to share it.

upvoted 0 times

...

Kattie

4 months ago

No way they can disclose it just for the acquisition, right?

upvoted 0 times

...

Lavina

4 months ago

Wait, can they really just share his data like that? Sounds sketchy.

upvoted 0 times

...

Shannan

4 months ago

Totally agree, that seems like a clear boundary.

upvoted 0 times

...

Ligia

4 months ago

I think Singabank can't disclose Jimmy's data since he's not in the retail division.

upvoted 0 times

...

Donte

5 months ago

I feel like I read somewhere that even if the monitoring was legal, there are still limits on sharing personal data. So, I’m hesitant about option C.

upvoted 0 times

...

Aleisha

5 months ago

This reminds me of a practice question about data sharing in mergers. I think they can disclose if it’s necessary for the acquisition, which might point to option D.

upvoted 0 times

...

Louis

5 months ago

I’m not entirely sure, but I think the purpose of the data collection matters. If it was for compliance, maybe it can't be shared?

upvoted 0 times

...

Britt

5 months ago

I remember discussing how employee monitoring data is often protected under privacy laws, so I’m leaning towards option B.

upvoted 0 times

...

Freeman

5 months ago

I'm feeling pretty confident about this one. The fact that Jimmy isn't in the division being acquired seems like a clear-cut reason why his data shouldn't be disclosed, unless there's some specific justification for it.

upvoted 0 times

...

Micah

5 months ago

Okay, I think I've got a handle on this. The key is whether the data was collected for the specific purpose of complying with Singabank's policies. If so, that could limit disclosure, even for an acquisition.

upvoted 0 times

...

Ettie

5 months ago

Hmm, I'm a bit confused on the details here. Is Jimmy's data really necessary for the acquisition, or is it just a blanket request for all employee data? That could make a difference in the answer.

upvoted 0 times

...

Elizabeth

5 months ago

This is a tricky one. I'll need to carefully consider the legal implications of disclosing personal data, even if the monitoring was legal.

upvoted 0 times

...

Catarina

10 months ago

Wow, Singabank is really going all out with the surveillance, huh? Maybe they should just install microchips in their employees' brains while they're at it.

upvoted 0 times

Leatha

9 months ago

C) Yes, if Singabank informs Jimmy of the disclosure of his personal data before it occurs.

upvoted 0 times

...

Yesenia

9 months ago

B) No, because the data was collected for the express purpose of complying with Singabank's privacy policies.

upvoted 0 times

...

Lashawnda

9 months ago

A) No, because Jimmy is not in the division that Bigbank seeks to acquire.

upvoted 0 times

...

Quinn

10 months ago

Haha, looks like Jimmy's going to need a really good hiding spot from all those cameras and monitors at Singabank. Maybe he can just change his name and move to the Cayman Islands.

upvoted 0 times

Shaun

10 months ago

Haha, poor Jimmy! He better watch out for those cameras.

upvoted 0 times

...

Dawne

10 months ago

B) No, because the data was collected for the express purpose of complying with Singabank's privacy policies.

upvoted 0 times

...

Fernanda

10 months ago

A) No, because Jimmy is not in the division that Bigbank seeks to acquire.

upvoted 0 times

...

Tamekia

11 months ago

Well, if it's legally allowed and the data is necessary for the acquisition, then I suppose Singabank can share it. But I hope Jimmy has a good lawyer on speed dial just in case.

upvoted 0 times

Lizette

9 months ago

User Comment: Well, if it's legally allowed and the data is necessary for the acquisition, then I suppose Singabank can share it. But I hope Jimmy has a good lawyer on speed dial just in case.

upvoted 0 times

...

Arminda

9 months ago

C) Yes, if Singabank informs Jimmy of the disclosure of his personal data before it occurs.

upvoted 0 times

...

Tyisha

10 months ago

B) No, because the data was collected for the express purpose of complying with Singabank's privacy policies.

upvoted 0 times

...

Leonard

10 months ago

A) No, because Jimmy is not in the division that Bigbank seeks to acquire.

upvoted 0 times

...

Ellen

11 months ago

I guess Singabank could disclose the data if they tell Jimmy first, but that's still a huge breach of trust. Poor Jimmy, his privacy is being invaded.

upvoted 0 times

Tegan

10 months ago

I agree, it wouldn't make sense for Singabank to disclose Jimmy's personal data in that situation.

upvoted 0 times

...

Sommer

10 months ago

A) No, because Jimmy is not in the division that Bigbank seeks to acquire.

upvoted 0 times

...

Tegan

11 months ago

No way, what a violation of privacy! Jimmy's personal data should never be disclosed to Bigbank just because they're acquiring the retail division. That's messed up.

upvoted 0 times

...