Johnson, Human Resource Information Systems, 5e
SAGE Publishing, 2021
Case Notes
Chapter 15: HRIS Privacy and Security
Practical Applications of an Information Privacy Plan Summary
Case Summary
XYZ University is a medium-sized tertiary education provider in the state of Queensland,
Australia. In undertaking its normal business of teaching, learning, and research, the university
collects, stores, and uses “personal information”—that is, anything that identifies a person’s
identity.
Case Analysis
Although it is clear that HRISs have numerous benefits in organizations, this case considers
some recent issues associated with their use including employee privacy and information
security. In particular, the case considers (a) practices that may affect individuals’ perceptions of
invasion of privacy, (b) the components of information security, (c) the security threats faced by
organizations, and (d) the implications for developing fair information management policies and
security practices.
Sample Answers to Case Questions
1. With regard to the above scenarios, you need to decide:
a) what information privacy principles (IPPs) have been breached,
b) how, and
c) what you would do to address the situation.
Scenario 1
Johnson, Human Resource Information Systems, 5e
SAGE Publishing, 2021
The officer making a copy of a grievance should not have left the file unattended
(failure to securely protect information).