Deal of The Day! Hurry Up, Grab the Special Discount - Save 25% - Ends In 00:00:00 Coupon code: SAVE25
Welcome to Pass4Success

- Free Preparation Discussions

IAPP CIPP/A Exam - Topic 3 Question 81 Discussion

Posted by Sharan on Jun 12, 2025 at 11:43 AM

SCENARIO -- Please use the following to answer the next QUESTION:

B-Star Limited is a Singapore based construction company with many foreign construction workers. B-Star's HR team maintains two databases. One (the "simple database") contains basic details from a standard in- processing form such as name, local address and mobile number. The other database (the "sensitive database") contains information collected by the HR Department as part of Annual Review Interviews. With the workers' cooperation, this database has expanded to include far-reaching sensitive information such as medical history, religious beliefs, ethnicity and educational levels of immediate family members. Carl left B- Star's employment yesterday, and has flown back home, rendering him unreachable. Today B-Star, without Carl's consent, wants to conduct research using Carl's medical records in the sensitive database.

Can B-Star legally conduct this research using Carl's medical data?

Suggested Answer: B

Get Premium CIPP/A Questions as Interactive Web-Based Practice Test or PDF Real Exam Format Detailed Explanations Instant Access Get Your Practice Test
34 comments · newest first
JA
Jame 11 months ago
No way, that sounds illegal to me.
AN
Annamaria 11 months ago
Totally agree, that's a violation of privacy!
DE
Dewitt 11 months ago
Wait, can they really do that after he left?
NI
Nidia 11 months ago
I thought consent was only for the time of employment.
TO
Tora 11 months ago
They can't use his data without consent, right?
WI
Willodean 12 months ago
I recall that sensitive data has stricter rules, so I lean towards option C since Carl is no longer employed.
QU
Quentin 12 months ago
This reminds me of a practice question about data protection laws. I think the answer is B, but I could be wrong about the specifics.
EU
Eura 1 year ago
I'm not entirely sure, but I feel like using medical records without consent is a big no-no, even if they collected it before.
AS
Ashlyn 1 year ago
I remember discussing consent in class, and I think sensitive data needs explicit consent, especially after employment ends.
ST
Stephaine 1 year ago
Okay, let me break this down. The key points are that Carl's sensitive personal data was collected with his cooperation, but he's no longer an employee. So even though he gave consent before, I don't think that covers using the data for research after he's left the company. I'm leaning towards option B or C.
LE
Lezlie 1 year ago
I think the answer is pretty clear - B-Star cannot use Carl's medical data for research without his consent, especially since he's no longer an employee. The fact that the data is in a "sensitive database" suggests it's protected information that requires explicit permission to access.
AN
Annelle 1 year ago
Hmm, I'm a bit unsure about this one. The question mentions that Carl gave consent for his sensitive data to be collected, but it's not clear if that consent extends to using the data for research after he's left the company. I'll need to think through the details carefully.
SH
Shizue 1 year ago
This scenario seems pretty straightforward to me. The key is that Carl's consent is required for his sensitive personal data to be used, and he has already left the company, so I don't think they can legally conduct the research without his consent.
AN
Angelo 1 year ago
But what if the research is really important for public interest?
AR
Arlie 1 year ago
I bet Carl's medical records include a diagnosis of 'chronic case of the Mondays'. That's the real sensitive data here.
FE
Fernanda 1 year ago
↳ replying to Arlie
C) No, because the research is taking place after Carl has left B-Star's employment.
XU
Xuan 1 year ago
↳ replying to Arlie
B) No, an organization is not allowed to use sensitive personal data without an individual's consent unless absolutely necessary.
JO
Joni 1 year ago
↳ replying to Arlie
A) Yes, because Carl gave his consent for his sensitive personal data to be collected during his employment.
BE
Bettina 1 year ago
I'm a bit confused. Isn't 'sensitive data' kind of a given in a 'sensitive database'? Talk about stating the obvious.
SA
Salena 1 year ago
↳ replying to Bettina
C) No, because the research is taking place after Carl has left B-Star's employment.
RO
Roselle 1 year ago
↳ replying to Bettina
B) No, an organization is not allowed to use sensitive personal data without an individual's consent unless absolutely necessary.
AL
Alesia 1 year ago
↳ replying to Bettina
A) Yes, because Carl gave his consent for his sensitive personal data to be collected during his employment.
GE
Gerry 1 year ago
I agree with you, Gerry. It's important to respect individuals' privacy rights.
JI
Jina 1 year ago
I'm going with D. If the research is for the public good, they should be able to use the data, right? Who cares about Carl's consent at this point?
DE
Devora 1 year ago
Definitely C. Once Carl left the company, they can't use his data without his permission.
AN
An 1 year ago
I think the answer is B. They can't use Carl's sensitive data without his consent, even if it's for research.
TO
Tomoko 1 year ago
↳ replying to An
D) Yes, if the research is deemed to be in the public interest.
EL
Elise 1 year ago
↳ replying to An
C) No, because the research is taking place after Carl has left B-Star's employment.
AN
Angelo 1 year ago
↳ replying to An
B) No, an organization is not allowed to use sensitive personal data without an individual's consent unless absolutely necessary.
BR
Brittney 1 year ago
↳ replying to An
C) No, because the research is taking place after Carl has left B-Star's employment.
CA
Carylon 1 year ago
↳ replying to An
B) No, an organization is not allowed to use sensitive personal data without an individual's consent unless absolutely necessary.
FL
Fletcher 1 year ago
↳ replying to An
A) Yes, because Carl gave his consent for his sensitive personal data to be collected during his employment.
EL
Ellsworth 1 year ago
↳ replying to An
A) Yes, because Carl gave his consent for his sensitive personal data to be collected during his employment.
LE
Leota 1 year ago
I think B-Star should not use Carl's medical data without his consent.
0/2000 characters

Save Cancel