Refrain from using employees' privacy choices to restrict employment.

CONTROL ID
12425

CONTROL TYPE
Human Resources Management

CLASSIFICATION
Preventive

This Control directly supports the implied Control(s):

Establish job categorization criteria, job recruitment criteria, and promotion criteria., CC ID: 00781

There are no implementation support Controls.

A U.S. organization that has received employee information from the EU under the EU-U.S. DPF may disclose it to third parties or use it for different purposes only in accordance with the Notice and Choice Principles. For example, where an organization intends to use personal information collected th… (III.9.b.i., EU-U.S. DATA PRIVACY FRAMEWORK PRINCIPLES)
A U.S. organization that has received employee information from the EU under the Privacy Shield may disclose it to third parties or use it for different purposes only in accordance with the Notice and Choice Principles. For example, where an organization intends to use personal information collected… (§ III.9.b.i., EU-U.S. Privacy Shield Framework Principles)
A U.S. organization that has received employee information from Switzerland under the Swiss-U.S. DPF may disclose it to third parties or use it for different purposes only in accordance with the Notice and Choice Principles. For example, where an organization intends to use personal information coll… (iii.9.b.i., SWISS-U.S. DATA PRIVACY FRAMEWORK PRINCIPLES)
A U.S. organization that has received employee information from the EU under the EU-U.S. DPF may disclose it to third parties or use it for different purposes only in accordance with the Notice and Choice Principles. For example, where an organization intends to use personal information collected th… (III.9.b.i., UK EXTENSION TO THE EU-U.S. DATA PRIVACY FRAMEWORK PRINCIPLES)