Font size
WorksheetsUse of Personal Data for Employment Purposes
Total questions: 14
Worksheet time: 9mins
To collect, use and disclose personal data about a job applicant for the purposes of assessing his application for employment, which is the correct ground that the agency should rely on first?
Public Sector Governance Act (PSGA): To uphold and promote the values of the Singapore public sector
Employment exclusion clause (i.e. for the purpose of entering into, managing or terminating an employment relationship) : list of use cases in the revised IM2R established for this
Consent given in the declaration of the Public Service Application Form (PSAF)
Zac has submitted a job application through the PSAF for the position of a Senior Executive (Finance Department) with RP. Select the correct set of use cases that RP can use or share his personal data for. [You can select multiple answers]
Sharing Zac’s psychometric test completed with RP, his CV, and pre-employment medical check with the senior management of RP
Sharing Zac’s psychometric test completed with RP, security screening results, and RP’s evaluation of Zac with MOE which may be interested in hiring him
Using Zac’s psychometric test results, contacting his previous agency for reference check, conducting verification checks of his professional qualification
Is the agency required to seek consent from and notify the job applicant before using or sharing his personal data for the use cases above?
Yes
No
A job applicant applies for the post of a project manager. Her responsibilities are to:
• take the lead in planning and implementing IT projects,
• liaise with the various stakeholders on projects.
Which of the following should not be asked during the interview? [You can select multiple answers]
Can you describe how you handled your past IT projects and what was your role in it?
Are you planning to have children soon?
Are you married?
How did you contribute to the outcomes of the projects and what could you have done better?
Which principle governing the collection, use and disclosure of personal data should be applied here?
Purpose
Data Minimisation
An agency wants to implement an internal structured job rotation for the middle management. This involves identifying eligible officers and informing them of the details of the programme. Which principle should the agency apply to find out whether they need to seek consent and notify the officers before using their personal data?
Purpose: Define the purpose of data use
Basis: Establish the ground for data use
Data minimisation: Identify what are the necessary data required for the purpose
What is the main ground that public agencies should rely on for the collection, use and disclosure of the personal data of employees?
Contract signed between the agency and the employee
Employment exclusion clause (i.e. for the purpose of entering into, managing or terminating an employment relationship)
PDPA
Which of the following option should the agency explore if it needs to use the personal data of an employee for a use case that does not fall under the list of use cases in the revised IM2R established under the employment exclusion clause (i.e. for the purpose of entering into, managing or terminating an employment relationship)? [You can select multiple answers]
Inform PSD if the agency’s preliminary assessment is that the new use case should fall under the employment exclusion clause so that PSD can assess if it is indeed for an employment purpose.
Assess if the use of personal data is authorised by any law.
Seek explicit consent from and notify the employee of the purpose.
Determine if the new use case falls under other exclusion clauses.
Andy from SHL suffered a workplace injury. RP needs to use and disclose his personal data to the relevant parties for the reporting of the incident and to assist him in receiving the work injury compensation. Identify the correct ground that RP can rely on to use and disclose personal data of Andy.
Public interest: Provide direct assistance to specific individuals or classes of individuals
Employment exclusion clause : Revised IM2R use case: Managing health and safety
Exclusion clause: The collection, use or disclosure (as the case may be) of personal data about an individual is necessary to respond to an emergency that threatens the life, health or safety of the individual or another individual.
What should the agency do before using Andy's personal data?
Seek consent from and notify Andy
No need to seek consent from, but required to notify Andy
No need to seek consent from nor notify Andy
OHR is handling the nomination and implementation of the internal staff awards. The Straits Times (ST) requests to interview the Longest Serving Officer Y. Does OHR need to seek the consent from and notify Y of the purpose before sharing his personal data with ST?
No
Yes
Which principle explains the correct answer?
Purpose
Data minimization
RP receives a request from the police to provide them with the personal data of an ex-officer Bryan who is suspected of embezzlement which occurred while he was still working in that agency. What should RP do before disclosing his data?
Seek consent from and notify Bryan
No need to seek consent from, but is required to notify Bryan
No need to seek consent from nor notify Bryan
RP has signed a contract with an employment agency for supplying short-term workers to us. RP wants to share the personal data of the short-term workers for purpose X. What should OHR do to find out whether it can share the personal data for that purpose?
Check if purpose X is covered under the list of use cases in the revised IM2R established under the employment exclusion clause (i.e. for the purpose of entering into, managing and terminating an employment relationship)
Check the contract between RP and the employment agency to find out if purpose X is covered under the contract
Check the contract between RP and the short-term worker to find out if purpose X is covered under the contract
