This question tests your knowledge of Domain 7.
In the context of Individual Rights During Examinations, specifically relating to GDPR, the question asks about EU, GDPR.
The correct answer is A: An organization must obtain a data subject ' s consent before collecting or processing personal data about that individual..
This question relates to individual rights during examinations. The correct answer accurately describes the legal protections, obligations, or privacy considerations that apply in workplace investigations. Fraud examiners must balance investigative needs with legal protections for individuals.
References:
- CFE Exam Content Outline: Domain 7: Individual Rights During Examinations
- GDPR
- Fraud Examiners Manual, Law Section

The 2014 Fraud Examiners Manual and CFE Prep list common concealment methods:
"Some common techniques for hiding assets include transferring assets into foreign trusts, overpaying taxes, prepaying on a home mortgage, obtaining a life insurance policy, and transferring assets into someone else's name." Thus, the correct answer is D.

A financial record showing that an asset has disappeared or has been diverted into an unknown account is a strong red flag of illicit transactions. Tracing illicit transactions focuses on identifying how funds or assets moved from their source to their final disposition, including whether assets were hidden, transferred, converted, or diverted. Option B suggests unexplained movement or concealment, which is directly relevant to asset tracing. Option A is not necessarily suspicious because low ATM activity might simply reflect normal banking habits. Option C is too vague because withdrawals for inconsistent amounts can occur for legitimate reasons. Option D is unclear and does not identify a recognized red flag unless the bearer instruments themselves are tied to concealment. Therefore, option B is the best answer.

"Due to the risks of illicit transactions, most jurisdictions require financial institutions to obtain information about the ownership and control of the foreign bank with which they maintain correspondent relationships".

Intentional infliction of emotional distress requires more than ordinary interview stress, embarrassment, or discomfort. The claimant must generally prove that the defendant engaged in extreme and outrageous conduct, acted intentionally or recklessly, and caused actual severe emotional or mental distress. Option A is correct because intent or reckless disregard is an essential element of the claim. Option B describes negligence concepts, not intentional infliction of emotional distress. Option C is incorrect because reputational damage is associated more closely with defamation, not this tort.
Option D is also wrong because there is no fixed two-year distress-duration requirement in the CFE materials. In fraud interviews, liability normally requires conduct far beyond ordinary questioning, such as outrageous abuse or coercion.