Mobile App Design Regulatory Frameworks & Compliance 2

Question 1

Under COPPA, what is the minimum age threshold that triggers parental consent requirements for US mobile apps?

Accepted Answer

13

Answer

COPPA (Children's Online Privacy Protection Act) requires verifiable parental consent before collecting personal data from children under 13.

Question 2

A fitness app collects heart rate data from users. Under HIPAA, this data is classified as Protected Health Information (PHI) only when:

Accepted Answer

It is linked to an identified individual and held by a HIPAA-covered entity or business associate

Answer

HIPAA PHI requires both identifiability and that the entity holding it is a covered entity or their business associate.

Question 3

Which App Store Review Guideline section primarily governs apps that include user-generated content?

Accepted Answer

Guideline 1.2 — User Generated Content

Answer

Apple's Guideline 1.2 requires UGC apps to have moderation mechanisms, reporting tools, and the ability to block abusive users.

Question 4

An app targeting the EU market uses a pre-ticked checkbox to obtain consent for marketing emails. Under GDPR, this consent is:

Accepted Answer

Invalid, because consent must be freely given and unambiguous

Answer

GDPR Article 7 requires consent to be a clear affirmative act; pre-ticked boxes do not constitute valid consent.

Question 5

Which US federal law requires mobile apps that accept credit card payments to comply with PCI DSS standards?

Accepted Answer

There is no single federal law; PCI DSS is an industry standard enforced by card networks

Answer

PCI DSS is a contractual requirement set by payment card brands (Visa, Mastercard, etc.), not a US federal statute.

Mobile App Design Practice Test