Occupational health records sit in the same shared drive folder as ordinary manager KPI spreadsheets. What is the key compliance failure?
Select an answer to reveal the explanation.
Short Explanation
Medical notes next to sales scorecards is like leaving X-rays on the break-room fridge. Health data is special-category stuff—lock it down and separate who can see it. Shared-drive soup fails that test.
Full Explanation
Occupational health data typically constitutes special-category personal data under Article 9 and demands stricter conditions and security. Storing it alongside ordinary managerial performance files expands the circle of access and elevates confidentiality risk. Controllers should segregate health records, limit access to occupational-health roles, and document Article 9 conditions and TOMs.