OPELA Industry Regulations and Compliance 3 — Questions and Answers
Question 1: The Children's Online Privacy Protection Act (COPPA) requires parental consent before collecting personal information from children under what age?
- 16
- 18
- 13 (Correct answer)
- 14
Correct answer: 13
COPPA requires verifiable parental consent before collecting personal information from children under 13 in the United States.
Question 2: Which concept in compliance law means an organization must be able to demonstrate that it complies with applicable data protection principles?
- Transparency
- Accountability (Correct answer)
- Integrity
- Confidentiality
Correct answer: Accountability
The accountability principle under GDPR and similar frameworks requires organizations to be able to demonstrate their compliance, not just claim it.
Question 3: Under OSHA's General Duty Clause, employers are required to:
- Provide workers with written copies of all safety regulations annually
- Furnish a workplace free from recognized hazards likely to cause death or serious harm (Correct answer)
- Conduct monthly safety drills for all remote employees
- Register all workplace injuries with the federal government within 24 hours
Correct answer: Furnish a workplace free from recognized hazards likely to cause death or serious harm
The General Duty Clause requires employers to provide a workplace free from recognized hazards that cause or are likely to cause death or serious physical harm.
Question 4: A university's language assessment program must comply with Section 508 of the Rehabilitation Act when:
- It receives any federal funding (Correct answer)
- It enrolls more than 1,000 students
- It offers assessments in more than one language
- It uses proctoring software developed overseas
Correct answer: It receives any federal funding
Section 508 applies to federal agencies and organizations receiving federal funding, requiring electronic and information technology to be accessible to people with disabilities.
Question 5: Which regulatory body in the U.S. oversees accreditation of higher education institutions that administer assessments like OPELA?
- Federal Trade Commission (FTC)
- Department of Education (ED) (Correct answer)
- National Institute of Standards and Technology (NIST)
- Consumer Financial Protection Bureau (CFPB)
Correct answer: Department of Education (ED)
The U.S. Department of Education oversees the accreditation system that ensures institutions meet quality standards, including those offering language assessments.
Question 6: In the context of online assessments, a 'data processing agreement' (DPA) between an institution and a vendor is required under GDPR primarily to:
- Transfer intellectual property rights to the institution
- Define how the processor handles personal data on behalf of the controller (Correct answer)
- Establish pricing and service-level guarantees
- Register the data processing with national authorities
Correct answer: Define how the processor handles personal data on behalf of the controller
GDPR Article 28 requires a DPA to be in place that details the obligations and rights of the processor when handling data on behalf of the controller.
Question 7: The principle of 'privacy by design' in compliance frameworks means that:
- Privacy controls are added after a product launches based on user complaints
- Privacy protections are built into systems and processes from the outset (Correct answer)
- Only users who opt in receive privacy protections
- Privacy audits are conducted annually by external reviewers
Correct answer: Privacy protections are built into systems and processes from the outset
Privacy by design requires that privacy protections be integrated into the design of systems and business practices proactively, not reactively.
OPELA Industry Regulations and Compliance 3
The Children's Online Privacy Protection Act (COPPA) requires parental consent before collecting personal information from children under what age?