Which GDPR principles were violated when a control system was misused for unauthorized employee monitoring?

When a control system is misused for unauthorized employee monitoring, it can potentially violate the principles of integrity and confidentiality, as well as data quality and accuracy.

The principle of integrity and confidentiality emphasizes that personal data must be processed in a manner that ensures its security, which includes protection against unauthorized access and processing. Unauthorized monitoring indicates a breach of this principle since it compromises the security and privacy of the employees’ personal information.

Furthermore, the principle of data quality and accuracy requires that personal data be accurate and, where necessary, kept up to date. Unauthorized monitoring may lead to the collection of inaccurate or irrelevant data about employees, impacting their rights and freedoms.

Therefore, the correct answer reflects that both integrity and confidentiality as well as data quality and accuracy principles are violated due to the misuse of the control system for monitoring employees without consent or proper justification.