A worker in a European Union (EU) member state has ceased his employment with a company. What should the employer most likely do in regard to the worker’s personal data?
A.
Destroy sensitive information and store the rest per applicable data protection rules.
B.
Store all of the data in case the departing worker makes a subject access request.
C.
Securely store the data that is required to be kept under local law.
D.
Provide the employee the reasons for retaining the data.
C. Securely store the data that is required to be kept under local law.
Relevant Legislation:
GDPR Article 5(1)(e): The principle of storage limitation states that personal data should be kept in a form which permits identification of data subjects for no longer than is necessary for the purposes for which the personal data are processed.
GDPR Article 6(1)(c): Processing is lawful if it is necessary for compliance with a legal obligation to which the controller is subject.
upvoted 2 times
...
Log in to ExamTopics
Sign in:
Community vote distribution
A (35%)
C (25%)
B (20%)
Other
Most Voted
A voting comment increases the vote count for the chosen answer by one.
Upvoting a comment with a selected answer will also increase the vote count towards that answer by one.
So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.
Ssourav
3 months, 3 weeks ago