Practice Test Geeks(GMC) Growth Marketing Certification Practice Test
← All GMC Flashcard Decks

Regulatory Compliance Flashcards

7 cards from real GMC practice questions. Tap to flip, then mark Knew It or Still Learning — missed cards come back until you master them.

Read the first 7 Regulatory Compliance flashcards as text

  1. A SaaS company collects data on children under 13 for its educational app marketed in the US. Which law mandates verifiable parental consent before collection?

    Answer: COPPA

    The Children's Online Privacy Protection Act (COPPA) requires verifiable parental consent before collecting personal information from children under 13.

  2. A marketer uses lookalike audiences built from hashed email lists on a social platform. Which compliance consideration is most critical under GDPR?

    Answer: Ensuring the email list was obtained with consent covering this purpose

    Under GDPR, the original lawful basis and purpose of data collection must extend to subsequent uses like lookalike modeling, requiring compatible purpose or fresh consent.

  3. What is 'consent withdrawal' under GDPR, and what must follow it?

    Answer: The data subject's right to revoke consent at any time, after which processing must stop

    GDPR Article 7(3) grants data subjects the right to withdraw consent at any time, and controllers must cease processing based on that consent without delay.

  4. Under the TCPA, which type of calls is exempt from the prior express written consent requirement?

    Answer: Non-commercial informational calls to landlines with established business relationships

    Non-commercial informational or transactional calls to landlines where an established business relationship exists may be exempt from TCPA's stricter consent rules.

  5. A brand publishes a sponsored Instagram post through an influencer. The FTC requires the influencer to:

    Answer: Clearly and conspicuously disclose the material connection in a way consumers will notice

    FTC Endorsement Guides require that material connections (payment, free products, etc.) be disclosed clearly and conspicuously so that ordinary consumers notice and understand the disclosure.

  6. Which regulation governs how health-related marketing data can be used when a company is a covered entity or business associate?

    Answer: HIPAA

    HIPAA's Privacy and Security Rules restrict how covered entities and their business associates may use or disclose protected health information (PHI), including for marketing.

  7. A marketer uses a third-party data broker's consumer list for email prospecting. Under the FTC Act, the marketer is responsible for:

    Answer: Verifying the list was legally obtained and that claims made are truthful

    Marketers bear FTC Act responsibility for their own campaigns regardless of where data originated, including ensuring claims are truthful and data use is lawful.