MAC Regulatory Compliance 3

Question 1

Under CAN-SPAM Act, within how many business days must a sender honor an opt-out request from an email recipient?

Accepted Answer

10 business days

Answer

CAN-SPAM requires senders to process opt-out requests within 10 business days of receipt and stop sending to that address.

Question 2

Which of the following scenarios would most likely constitute a GDPR data breach requiring notification to the supervisory authority?

Accepted Answer

An encrypted laptop containing customer email addresses is stolen

Answer

Loss of a device containing personal data—even encrypted—may qualify as a breach requiring assessment and potential supervisory authority notification within 72 hours.

Question 3

What is the primary purpose of a Data Processing Agreement (DPA) between a marketing platform and its analytics vendor?

Accepted Answer

To define how the vendor processes personal data on behalf of the controller, ensuring GDPR compliance

Answer

A DPA legally binds the processor to handle personal data only as instructed by the controller, a requirement under GDPR Article 28.

Question 4

A marketer uses lookalike audience modeling by sharing hashed email lists with a social media platform. Which compliance consideration is most critical?

Accepted Answer

Verifying that users consented to their data being shared with third-party platforms for advertising

Answer

Sharing hashed emails with third parties for ad targeting requires a valid legal basis—typically consent—especially under GDPR and CCPA.

Question 5

Which US state law introduced the concept of 'sensitive personal information' with additional restrictions, including data about precise geolocation?

Accepted Answer

California Privacy Rights Act (CPRA)

Answer

CPRA, which amended CCPA, created a new category of 'sensitive personal information' with heightened protections including precise geolocation data.

(MAC) Marketing Analytics Certification Practice Test

(MAC) Marketing Analytics Certification Practice Test

MAC Regulatory Compliance 3