Question $2$

You are working with your colleagues on a database that contains employees' name, Scotiabank ID number, personal telephone number and personal email address. The data will be stored or held within a Scotiabank internal site, the personally identifiable information $($PII$)$ will be used exclusively for employment relationship purposes, and it will not be shared outside of the Bank.

Do you need to request a Privacy Impact Assessment $($P$/$A$)?$

Select the best answer.

a$.$ Yes, because the database will have employees' PII.

b$.$ No$,$ because the employees' $($Pil$)$ will not leave Scotiabank network.

c$.$ No$,$ because the employee's PIl will be used for a valid and legitimate purpose.