Skip to content

CS Professional · Artificial Intelligence, Data Analytics and Cyber Security - Laws and Practice · Management Information Systems - An Overview

A company's HR module of its MIS stores employee Aadhaar numbers and medical records. The HR head asks to give every department read access to the whole database so that reports are easier. Which approach best fits the data protection principle expected under Indian law and good MIS design?

Role-based access is best. Each user sees only the personal data needed for their function, which supports purpose limitation and reasonable security safeguards for sensitive data. Open access for all employees or sharing with vendors increases the risk of unauthorised disclosure.

  1. ARole-based access limiting each user to data needed for their functionCorrect
  2. BOpen access, since all users are employees of the same company
  3. CAccess only for the IT department, with no HR use
  4. DSharing the database with vendors for faster analysis

Explanation

Personal data should be accessed only as needed for a defined purpose, and reasonable security practices are expected for sensitive data. Role-based access achieves this. Open access defeats purpose limitation, and vendor sharing widens exposure. Blocking HR entirely makes the system unusable.

Did you get it right without looking?

One question tells you little. A timed set on Management Information Systems - An Overview shows your real accuracy, how long you take and where you lose marks.

Practise Management Information Systems - An OverviewFree diagnostic mock

More Management Information Systems - An Overview questions