React Native Regulatory Frameworks & Compliance 2 — Questions and Answers
Question 1: Under COPPA, what age threshold requires verifiable parental consent before collecting personal data from US-based mobile app users?
- 16 years old
- 13 years old (Correct answer)
- 14 years old
- 18 years old
Correct answer: 13 years old
COPPA (Children's Online Privacy Protection Act) requires verifiable parental consent before collecting personal information from children under 13.
Question 2: A React Native app uses `AsyncStorage` to cache user health records. Which US regulation most directly governs this data handling?
- PCI DSS
- COPPA
- HIPAA (Correct answer)
- FERPA
Correct answer: HIPAA
HIPAA (Health Insurance Portability and Accountability Act) governs the protection of individually identifiable health information in the US.
Question 3: When publishing a React Native app on Google Play that targets users in the EU, which legal basis under GDPR is most commonly used for analytics with user consent?
- Legitimate interest
- Vital interests
- Public task
- Consent (Correct answer)
Correct answer: Consent
Explicit user consent is the most commonly applied GDPR legal basis for optional analytics tracking in mobile apps.
Question 4: Google Play's Data Safety section requires app developers to declare which of the following?
- Only third-party SDK data practices
- Only data collected by the app itself
- Data collected and shared by both the app and its SDKs (Correct answer)
- Only data stored on the device
Correct answer: Data collected and shared by both the app and its SDKs
Google Play's Data Safety form requires disclosure of data collected and shared by the app AND any third-party SDKs it includes.
Question 5: What does App Transport Security (ATS) enforce by default in iOS React Native apps?
- Certificate pinning for all domains
- HTTPS connections for all network requests (Correct answer)
- End-to-end encryption for AsyncStorage
- OAuth 2.0 for all API calls
Correct answer: HTTPS connections for all network requests
ATS enforces HTTPS (TLS) connections for all network requests in iOS apps by default, blocking plain HTTP.
Question 6: A React Native fintech app in the US processes credit card payments. Which compliance standard governs how cardholder data must be handled?
- SOC 2
- ISO 27001
- PCI DSS (Correct answer)
- NIST CSF
Correct answer: PCI DSS
PCI DSS (Payment Card Industry Data Security Standard) mandates security requirements for any entity that stores, processes, or transmits cardholder data.
Question 7: Which Apple App Store guideline category directly restricts apps from requesting permissions that are not relevant to the app's core functionality?
- Guideline 2.1 – App Completeness
- Guideline 5.1 – Privacy (Correct answer)
- Guideline 4.3 – Spam
- Guideline 3.1 – Payments
Correct answer: Guideline 5.1 – Privacy
Apple's Guideline 5.1 (Privacy) requires that apps only request permissions that are necessary for their core functionality.
React Native Regulatory Frameworks & Compliance 2
Under COPPA, what age threshold requires verifiable parental consent before collecting personal data from US-based mobile app users?