Free PLC Enforcement Mechanisms & Penalties Questions and Answers — Questions and Answers
Question 1: Under the GDPR, what is the maximum administrative fine for severe violations?
- €10 million or 2% of annual global turnover
- €15 million or 3% of annual global turnover
- €20 million or 4% of annual global turnover (Correct answer)
- €25 million or 5% of annual global turnover
Correct answer: €20 million or 4% of annual global turnover
The GDPR imposes a two-tiered system for administrative fines. For the most severe violations, such as infringements of data subjects' rights or principles for processing, the maximum fine can be up to €20 million or 4% of the company's total worldwide annual turnover from the preceding financial year, whichever is higher. This significant penalty underscores the importance of strict adherence to GDPR requirements.
Question 2: Which U.S. agency is primarily responsible for enforcing consumer privacy laws?
- Federal Communications Commission (FCC)
- Federal Trade Commission (FTC) (Correct answer)
- Department of Justice (DOJ)
- Consumer Financial Protection Bureau (CFPB)
Correct answer: Federal Trade Commission (FTC)
In the United States, the Federal Trade Commission (FTC) is the primary agency responsible for enforcing consumer privacy laws. The FTC uses its authority under Section 5 of the FTC Act, which prohibits unfair and deceptive practices, to take action against companies that fail to protect consumer data or misrepresent their privacy practices. It also enforces specific privacy laws like COPPA (Children's Online Privacy Protection Act).
Question 3: What is a common consequence for companies that fail to comply with data protection regulations?
- Increased customer trust
- Higher employee retention
- Financial penalties and legal actions (Correct answer)
- Tax incentives
Correct answer: Financial penalties and legal actions
Companies that fail to comply with data protection regulations face severe consequences, including significant financial penalties imposed by regulatory authorities. Beyond fines, non-compliance can lead to legal actions from affected individuals, class-action lawsuits, and mandatory audits. These outcomes can severely impact a company's financial stability, reputation, and operational continuity.
Question 4: Which of the following is a potential penalty under the CCPA for intentional violations?
- $2,500 per violation
- $5,000 per violation
- $7,500 per violation (Correct answer)
- $10,000 per violation
Correct answer: $7,500 per violation
The California Consumer Privacy Act (CCPA) and its successor, the California Privacy Rights Act (CPRA), specify penalties for violations. For intentional violations, the California Attorney General can impose civil penalties of up to $7,500 per violation. For unintentional violations, the penalty is $2,500 per violation, provided the business fails to cure the violation within 30 days after being notified.
Question 5: What enforcement action can the FTC take against companies violating privacy agreements?
- Issue tax audits
- Revoke business licenses
- Issue consent decrees (Correct answer)
- Impose import tariffs
Correct answer: Issue consent decrees
When the FTC finds that a company has violated privacy agreements or engaged in deceptive privacy practices, it often resolves the matter by issuing a consent decree. A consent decree is a legally binding agreement that outlines specific actions the company must take to remedy the violation and prevent future occurrences, often including regular privacy audits and reporting requirements. Failure to comply with a consent decree can result in additional, significant penalties.
Free PLC Enforcement Mechanisms & Penalties Questions and Answers
Under the GDPR, what is the maximum administrative fine for severe violations?