Mobile App Design Regulatory Frameworks & Compliance 4

Question 1

An app requests 'always on' background location permission on Android. Google Play policy requires the app to:

Accepted Answer

Submit a Declaration Form and provide a compelling use case, reviewed by Google

Answer

Google Play requires apps using background location to complete a permissions declaration and justify the need; Google reviews these declarations.

Question 2

A fintech app must comply with FinCEN's Bank Secrecy Act (BSA) requirements. Which design feature directly supports BSA compliance?

Accepted Answer

In-app identity verification (KYC) flow that collects government-issued ID and performs AML screening

Answer

BSA/AML compliance requires Know Your Customer (KYC) identity verification and Anti-Money Laundering (AML) screening built into the onboarding flow.

Question 3

Under GDPR's data minimization principle, a mobile app should collect:

Accepted Answer

Only the personal data that is adequate, relevant, and limited to what is necessary for the stated purpose

Answer

GDPR Article 5(1)(c) requires data minimization: collecting only what is necessary for the explicitly stated processing purpose.

Question 4

Apple's App Store requires apps in the 'Kids' category to:

Accepted Answer

Not include behavioral advertising or analytics that track users across apps and websites

Answer

Apple prohibits behavioral advertising and third-party analytics that track users across apps in the Kids category to protect children's privacy.

Question 5

A US-based healthcare app uses a third-party analytics SDK. Under HIPAA, this relationship requires:

Accepted Answer

A signed Business Associate Agreement (BAA) with the analytics vendor

Answer

Any vendor that processes PHI on behalf of a covered entity must sign a BAA establishing HIPAA compliance obligations.

Mobile App Design Practice Test