PACE Professional Ethics & Compliance 3 — Questions and Answers
Question 1: Under PCI DSS compliance requirements, what must a contact center agent do if a customer verbally provides their full credit card number during a call?
- Record it in the CRM notes field for future reference
- Repeat it back loudly to confirm accuracy
- Handle it per the organization's cardholder data security policy and avoid storing unencrypted data (Correct answer)
- Transfer the call to a specialized billing team automatically
Correct answer: Handle it per the organization's cardholder data security policy and avoid storing unencrypted data
PCI DSS requires that cardholder data be handled according to strict security protocols, including avoiding unencrypted storage or unnecessary transmission.
Question 2: Which of the following represents an example of treating customers with dignity and respect in compliance with ethical standards?
- Rushing through interactions to lower average handle time
- Using first names only when the customer introduces themselves that way (Correct answer)
- Avoiding apologies to prevent admission of liability
- Placing customers on hold without explanation to reduce talk time
Correct answer: Using first names only when the customer introduces themselves that way
Using customers' names appropriately and respecting their preferences demonstrates dignity and builds rapport ethically.
Question 3: The Fair Debt Collection Practices Act (FDCPA) prohibits debt collectors from contacting consumers at what times without prior consent?
- Before 9 a.m. or after 8 p.m. local time
- Before 8 a.m. or after 9 p.m. local time (Correct answer)
- During federal holidays and weekends
- During the consumer's known work hours
Correct answer: Before 8 a.m. or after 9 p.m. local time
The FDCPA prohibits debt collectors from calling consumers before 8 a.m. or after 9 p.m. in the consumer's local time zone.
Question 4: An agent notices that the script they are required to use contains a statement that could mislead customers about a product's cancellation policy. The MOST ethical course of action is to:
- Use the script as written since it was approved by management
- Ignore the misleading statement and substitute their own language
- Report the concern to a supervisor or compliance team and request a script review (Correct answer)
- Disclose the issue verbally to each customer before reading the script
Correct answer: Report the concern to a supervisor or compliance team and request a script review
Escalating a potentially misleading script to compliance or management ensures the issue is formally reviewed and corrected through proper channels.
Question 5: Which type of customer data is typically classified as 'sensitive' and warrants the highest level of protection under US privacy regulations?
- Customer zip codes and area codes
- Social Security Numbers, health information, and financial account numbers (Correct answer)
- Purchase history and product preferences
- Customer service interaction timestamps
Correct answer: Social Security Numbers, health information, and financial account numbers
SSNs, health data, and financial account numbers are classified as sensitive personal information subject to heightened protection under laws like HIPAA, GLBA, and state privacy statutes.
Question 6: What is the primary purpose of a mandatory ethics training program in a customer engagement organization?
- To reduce training costs by standardizing content delivery
- To ensure all staff understand acceptable conduct, legal requirements, and reporting obligations (Correct answer)
- To replace individual accountability with organizational policy
- To satisfy ISO certification audit requirements
Correct answer: To ensure all staff understand acceptable conduct, legal requirements, and reporting obligations
Ethics training ensures employees know behavioral standards, relevant laws, and how to report violations, building a culture of compliance.
Question 7: A customer engagement professional is asked to participate in a practice that is legal but clearly violates the organization's code of conduct. How should they respond?
- Comply, since legality is the only standard that matters professionally
- Refuse and document the request, reporting it through ethics or compliance channels (Correct answer)
- Seek a legal opinion before deciding whether to participate
- Participate only if their supervisor approves in writing
Correct answer: Refuse and document the request, reporting it through ethics or compliance channels
A company's code of conduct establishes professional standards beyond legal minimums; refusing and reporting violations upholds both personal and organizational integrity.
PACE Professional Ethics & Compliance 3
Under PCI DSS compliance requirements, what must a contact center agent do if a customer verbally provides their full credit card number during a call?