Certified Information Privacy Professional CIPPE · Free Practice Question Medium
Question 8
Under the GDPR, can an organization request medical information from an applicant completing an application for a data analyst role?
- A Yes, to ensure that the applicant has no medical issues
- B No, a company can not request for health related data
- C Yes, to assess suitable adjustments for medical conditions
-
D
No health related data is not required for a data analyst role
Reveal correct answer
Correct answer: C
Explanation
The processing of health data by the organization is allowed to comply with a legal obligation or where there is a lawful basis for processing the personal data such as assessing the need for work adjustment for an applicant who has a medical condition.
Discussion
Think the marked answer is wrong, or have a better explanation? Share it below — comments appear after review.
You must be logged in to post a comment.
