Certified Information Privacy Professional CIPPE · Free Practice Question Medium

Question 21

According to the GDPR, can an employer refuse to grant a former employee access to all their emails and IT logs?
  • A No, the employer should respond to all data access requests
  • B

    Yes, the employer owns all the employe's emails and content

  • C

    Yes, provided the request is excessive and would be a disproportionate burden for the employer

  • D Yes, to protect trade secrets
Reveal correct answer

Correct answer: C

Explanation

Information provided under Articles 13 and 14 and any communication and any actions taken under Articles 15 to 22 and 34 shall be provided free of charge. Where requests from a data subject are manifestly unfounded or excessive, in particular because of their repetitive character, the controller may either:

1charge a reasonable fee taking into account the administrative costs of providing the information or communication or taking the action requested; or

2refuse to act on the request.

An employer may refuse to allow a former employee access to work-related correspondence, including emails, on the grounds that the request is excessive, particularly when it involves a lot of information

Discussion

Think the marked answer is wrong, or have a better explanation? Share it below — comments appear after review.

You must be logged in to post a comment.

Preparing For

Your Certification?

255+ certifications
Detailed explanations
Free PDF samples

Has All The Questions You Need