โ† All MAC Flashcard Decks

Regulatory Compliance Flashcards

7 cards from real MAC practice questions. Tap to flip, then mark Knew It or Still Learning โ€” missed cards come back until you master them.

Read the first 7 Regulatory Compliance flashcards as text
  1. Under the California Consumer Privacy Act (CCPA), what right allows consumers to stop businesses from selling their personal information to third parties?

    Answer: Right to opt-out

    CCPA's right to opt-out lets California residents direct businesses to stop selling their personal information to third parties.

  2. Which FTC Act section forms the primary legal basis for the FTC's authority to regulate unfair or deceptive marketing analytics practices?

    Answer: Section 5

    Section 5 of the FTC Act prohibits unfair or deceptive acts or practices in commerce, giving the FTC broad authority over marketing practices.

  3. A marketing analyst discovers that email campaign data includes records of minors under 13. Which federal law primarily governs how this data must be handled?

    Answer: COPPA

    COPPA (Children's Online Privacy Protection Act) requires verifiable parental consent before collecting personal data from children under 13.

  4. What does the term 'pseudonymization' mean in the context of data privacy compliance for marketing analytics?

    Answer: Replacing identifying fields with artificial identifiers so data cannot be attributed without additional information

    Pseudonymization replaces direct identifiers with artificial ones, reducing privacy risk while still allowing data to be re-linked if needed.

  5. Which element is NOT typically required in a lawful basis assessment under GDPR for processing marketing analytics data?

    Answer: Obtaining approval from a national data protection authority for every campaign

    GDPR does not require prior approval from a data protection authority for every campaign; most processing only requires internal documentation of the lawful basis.

  6. A company collects browsing data through first-party cookies to personalize ads. Under GDPR, which lawful basis is most commonly relied upon for this processing?

    Answer: Consent

    Behavioral advertising based on first-party cookies typically relies on explicit user consent as the lawful basis under GDPR.

  7. What is a 'data minimization' principle as applied to marketing analytics?

    Answer: Collecting only the data that is adequate, relevant, and limited to what is necessary for the specified purpose

    Data minimization requires collecting only what is strictly necessary for the defined purpose, reducing privacy risks and compliance exposure.