Recordkeeping, Retention and Privacy practice questions for the CSP exam

An employee's designated representative requests a company's statistical analysis of workplace exposure and medical data. The report lists each affected worker's payroll number, exact age, and job title alongside their audiometric results. Before giving the representative access, what must the employer do?

1. A.Remove only direct identifiers such as names and payroll numbers, since exact age and job title are not identifiers
2. B.Provide the analysis unchanged, because a designated representative is entitled to the complete report
3. C.Refuse access entirely, because analyses containing medical information may never be released to a representative
4. D.Remove the personal identifiers, both direct and those that could indirectly identify specific employees, before providing access

A union that is the recognized collective bargaining agent for workers on a plant's paint line asks the employer for the area air sampling results for that line, together with the sampling and analytical methods used. No employee has signed a written authorization naming the union. The employer's safety manager must decide how to respond. Which action is consistent with the standard?

1. A.Release the records only to the individual employees, because a union cannot act as a designated representative
2. B.Withhold the records until every affected employee signs a written authorization naming the union
3. C.Provide the sampling results but withhold the sampling and analytical methods, because those are not part of an exposure record
4. D.Provide access, because the union is treated automatically as a designated representative for exposure records without written employee authorization