From the course: ISC2 Certified Information Systems Security Professional (CISSP) (2024) Cert Prep

Unlock this course with a free trial

Join today to access over 23,200 courses taught by industry experts.

Employee privacy

Employee privacy

From the course: ISC2 Certified Information Systems Security Professional (CISSP) (2024) Cert Prep

Start my 1-month free trial Buy for my team

Employee privacy

“

- [Instructor] During the course of employment, organizations gather all kinds of sensitive information about their employees. Much of this information, employees would normally prefer be kept private; this includes the results of pre-employment background checks, credit checks and other screenings, social security numbers collected for tax purposes, salary and other payroll information, health information, and other benefit records. Organizations have both a legal and ethical responsibility to protect this information from prying eyes and ensure that it is not lost or stolen. Employees trust their employers to preserve their privacy, and there are many ways that an organization can meet this responsibility. These responsibilities should be documented in the organization's privacy policies. First is the principle of minimization. Organizations should collect only the information that they need in the legitimate course of employment, and they should store that information only as long…

Contents