Regulatory Compliance Flashcards
7 cards from real CRM practice questions. Tap to flip, then mark Knew It or Still Learning — missed cards come back until you master them.
Read the first 7 Regulatory Compliance flashcards as text
In records management, what does 'defensible disposition' mean?
Answer: Documenting and following a consistent, policy-driven process for records destruction
Defensible disposition means consistently applying a documented retention schedule so that destruction decisions can be justified if legally challenged.
Which federal law regulates the management and disposal of records created by U.S. federal executive agencies?
Answer: Federal Records Act (FRA)
The Federal Records Act (44 U.S.C. Chapters 21, 29, 31, 33) governs the creation, management, and disposition of federal records.
Under the Children's Online Privacy Protection Act (COPPA), parental consent is required before collecting personal information from children under what age?
Answer: 13
COPPA requires verifiable parental consent before collecting, using, or disclosing personal information from children under age 13.
A litigation hold (also called a legal hold) should be issued at what point during anticipated litigation?
Answer: As soon as litigation is reasonably anticipated
The duty to preserve evidence arises when litigation is reasonably anticipated, which may be well before a lawsuit is formally filed.
Under the Payment Card Industry Data Security Standard (PCI DSS), how long must audit logs be retained?
Answer: 12 months with 3 months immediately available
PCI DSS Requirement 10.7 mandates that audit logs be retained for at least 12 months, with at least 3 months immediately available for analysis.
Which principle in information governance ensures that records are only accessible to individuals who have a legitimate business need?
Answer: Need-to-know access control
Need-to-know access control restricts record access to authorized individuals whose job functions require it, reducing unauthorized disclosure risk.
The National Archives and Records Administration (NARA) General Records Schedules (GRS) apply to:
Answer: Common administrative records of all federal agencies
NARA's General Records Schedules authorize disposal of common administrative records found across all federal executive agencies.