U.S. Independence Day Deal! Unlock 25% OFF Today – Limited-Time Offer - Ends In 00:00:00 Coupon code: SAVE25
Welcome to Pass4Success

- Free Preparation Discussions
Mail Us support@pass4success.com
Location US
Mob_nav_barsMENU

IAPP CIPP/A Exam - Topic 3 Question 81 Discussion

SCENARIO -- Please use the following to answer the next QUESTION:B-Star Limited is a Singapore based construction company with many foreign construction workers. B-Star's HR team maintains two databases. One (the "simple database") contains basic details from a standard in- processing form such as name, local address and mobile number. The other database (the "sensitive database") contains information collected by the HR Department as part of Annual Review Interviews. With the workers' cooperation, this database has expanded to include far-reaching sensitive information such as medical history, religious beliefs, ethnicity and educational levels of immediate family members. Carl left B- Star's employment yesterday, and has flown back home, rendering him unreachable. Today B-Star, without Carl's consent, wants to conduct research using Carl's medical records in the sensitive database.Can B-Star legally conduct this research using Carl's medical data?
B) No, an organization is not allowed to use sensitive personal data without an individual's consent unless absolutely necessary.
A) Yes, because Carl gave his consent for his sensitive personal data to be collected during his employment.
C) No, because the research is taking place after Carl has left B-Star's employment.
D) Yes, if the research is deemed to be in the public interest.

IAPP CIPP/A Exam - Topic 3 Question 81 Discussion

Actual exam question for IAPP's CIPP/A exam
Question #: 81
Topic #: 3
[All CIPP/A Questions]

SCENARIO -- Please use the following to answer the next QUESTION:

B-Star Limited is a Singapore based construction company with many foreign construction workers. B-Star's HR team maintains two databases. One (the "simple database") contains basic details from a standard in- processing form such as name, local address and mobile number. The other database (the "sensitive database") contains information collected by the HR Department as part of Annual Review Interviews. With the workers' cooperation, this database has expanded to include far-reaching sensitive information such as medical history, religious beliefs, ethnicity and educational levels of immediate family members. Carl left B- Star's employment yesterday, and has flown back home, rendering him unreachable. Today B-Star, without Carl's consent, wants to conduct research using Carl's medical records in the sensitive database.

Can B-Star legally conduct this research using Carl's medical data?

Show Suggested Answer Hide Answer
Suggested Answer: B

by Sharan at Jun 12, 2025, 11:43 AM

Limited Time Offer

25%

Off

Get Premium CIPP/A Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

0/2000 characters
Submit Cancel
Jame
6 months ago
No way, that sounds illegal to me.
upvoted 0 times
...
Annamaria
6 months ago
Totally agree, that's a violation of privacy!
upvoted 0 times
...
Dewitt
6 months ago
Wait, can they really do that after he left?
upvoted 0 times
...
Nidia
7 months ago
I thought consent was only for the time of employment.
upvoted 0 times
...
Tora
7 months ago
They can't use his data without consent, right?
upvoted 0 times
...
Willodean
7 months ago
I recall that sensitive data has stricter rules, so I lean towards option C since Carl is no longer employed.
upvoted 0 times
...
Quentin
7 months ago
This reminds me of a practice question about data protection laws. I think the answer is B, but I could be wrong about the specifics.
upvoted 0 times
...
Eura
8 months ago
I'm not entirely sure, but I feel like using medical records without consent is a big no-no, even if they collected it before.
upvoted 0 times
...
Ashlyn
8 months ago
I remember discussing consent in class, and I think sensitive data needs explicit consent, especially after employment ends.
upvoted 0 times
...
Stephaine
8 months ago
Okay, let me break this down. The key points are that Carl's sensitive personal data was collected with his cooperation, but he's no longer an employee. So even though he gave consent before, I don't think that covers using the data for research after he's left the company. I'm leaning towards option B or C.
upvoted 0 times
...
Lezlie
8 months ago
I think the answer is pretty clear - B-Star cannot use Carl's medical data for research without his consent, especially since he's no longer an employee. The fact that the data is in a "sensitive database" suggests it's protected information that requires explicit permission to access.
upvoted 0 times
...
Annelle
8 months ago
Hmm, I'm a bit unsure about this one. The question mentions that Carl gave consent for his sensitive data to be collected, but it's not clear if that consent extends to using the data for research after he's left the company. I'll need to think through the details carefully.
upvoted 0 times
...
Shizue
8 months ago
This scenario seems pretty straightforward to me. The key is that Carl's consent is required for his sensitive personal data to be used, and he has already left the company, so I don't think they can legally conduct the research without his consent.
upvoted 0 times
...
Angelo
11 months ago
But what if the research is really important for public interest?
upvoted 0 times
...
Arlie
11 months ago
I bet Carl's medical records include a diagnosis of 'chronic case of the Mondays'. That's the real sensitive data here.
upvoted 0 times
Fernanda
10 months ago
C) No, because the research is taking place after Carl has left B-Star's employment.
upvoted 0 times
...
Xuan
10 months ago
B) No, an organization is not allowed to use sensitive personal data without an individual's consent unless absolutely necessary.
upvoted 0 times
...
Joni
11 months ago
A) Yes, because Carl gave his consent for his sensitive personal data to be collected during his employment.
upvoted 0 times
...
...
Bettina
12 months ago
I'm a bit confused. Isn't 'sensitive data' kind of a given in a 'sensitive database'? Talk about stating the obvious.
upvoted 0 times
Salena
10 months ago
C) No, because the research is taking place after Carl has left B-Star's employment.
upvoted 0 times
...
Roselle
10 months ago
B) No, an organization is not allowed to use sensitive personal data without an individual's consent unless absolutely necessary.
upvoted 0 times
...
Alesia
11 months ago
A) Yes, because Carl gave his consent for his sensitive personal data to be collected during his employment.
upvoted 0 times
...
...
Gerry
12 months ago
I agree with you, Gerry. It's important to respect individuals' privacy rights.
upvoted 0 times
...
Jina
1 year ago
I'm going with D. If the research is for the public good, they should be able to use the data, right? Who cares about Carl's consent at this point?
upvoted 0 times
...
Devora
1 year ago
Definitely C. Once Carl left the company, they can't use his data without his permission.
upvoted 0 times
...
An
1 year ago
I think the answer is B. They can't use Carl's sensitive data without his consent, even if it's for research.
upvoted 0 times
Tomoko
10 months ago
D) Yes, if the research is deemed to be in the public interest.
upvoted 0 times
...
Elise
11 months ago
C) No, because the research is taking place after Carl has left B-Star's employment.
upvoted 0 times
...
Angelo
11 months ago
B) No, an organization is not allowed to use sensitive personal data without an individual's consent unless absolutely necessary.
upvoted 0 times
...
Brittney
11 months ago
C) No, because the research is taking place after Carl has left B-Star's employment.
upvoted 0 times
...
Carylon
11 months ago
B) No, an organization is not allowed to use sensitive personal data without an individual's consent unless absolutely necessary.
upvoted 0 times
...
Fletcher
12 months ago
A) Yes, because Carl gave his consent for his sensitive personal data to be collected during his employment.
upvoted 0 times
...
Ellsworth
12 months ago
A) Yes, because Carl gave his consent for his sensitive personal data to be collected during his employment.
upvoted 0 times
...
...
Leota
1 year ago
I think B-Star should not use Carl's medical data without his consent.
upvoted 0 times
...

Save Cancel