Regulatory Compliance Flashcards
7 cards from real GMC practice questions. Tap to flip, then mark Knew It or Still Learning — missed cards come back until you master them.
Read the first 7 Regulatory Compliance flashcards as text
Under the CCPA, what is the maximum civil penalty a business can face per intentional violation?
Answer: $7,500
The CCPA allows the California Attorney General to impose civil penalties of up to $7,500 per intentional violation.
A marketer wants to send promotional SMS messages to customers in the US. Which law primarily governs this activity?
Answer: TCPA
The Telephone Consumer Protection Act (TCPA) regulates commercial text messages and requires prior express written consent for marketing SMS.
Which of the following best describes a 'legitimate interest' as a legal basis under GDPR?
Answer: Processing necessary for the controller's genuine interests that are not overridden by data subject rights
Under GDPR Article 6(1)(f), legitimate interest requires a balancing test to ensure the controller's interests are not overridden by the data subject's fundamental rights.
A growth marketer runs retargeting ads using pixel data. Under GDPR, pixel tracking on a website typically requires:
Answer: Prior informed consent from EU visitors before the pixel fires
Cookies and tracking pixels that process personal data of EU residents require prior informed consent under GDPR and the ePrivacy Directive.
What does the term 'data minimization' require under GDPR?
Answer: Collecting only data that is adequate, relevant, and limited to what is necessary for the purpose
GDPR Article 5(1)(c) mandates that personal data must be adequate, relevant, and limited to what is necessary in relation to the stated processing purpose.
Which FTC Act section is most commonly cited in enforcement actions against deceptive marketing practices?
Answer: Section 5
FTC Act Section 5 prohibits unfair or deceptive acts or practices in or affecting commerce and is the primary basis for FTC marketing enforcement.
Under CAN-SPAM, how quickly must a sender honor an opt-out request from a commercial email recipient?
Answer: Within 10 business days
CAN-SPAM requires that opt-out requests be honored within 10 business days of receipt, and senders cannot charge a fee or require extra steps to unsubscribe.