TypeScript Regulatory Compliance & Legal Framework 2

Question 1

Under GDPR, which TypeScript pattern best enforces that user consent is recorded before processing personal data?

Accepted Answer

A branded type `ConsentToken` that processing functions require as a parameter

Answer

A branded (nominal) type ensures at compile time that a consent token has been obtained before calling any processing function.

Question 2

Which open-source license requires that derivative works also be distributed under the same license, creating a 'copyleft' obligation?

Accepted Answer

GNU General Public License (GPL)

Answer

The GPL is a copyleft license, meaning any derivative or combined work distributed publicly must also be released under the GPL.

Question 3

A TypeScript library ships type definitions that expose internal implementation details. Which legal concept most directly governs whether those definitions can be reverse-engineered?

Accepted Answer

Copyright law on the type definitions themselves

Answer

Type definition files (.d.ts) are copyrightable expression, so their reproduction and derivative use is governed by the copyright held by the author.

Question 4

Which HIPAA safeguard category specifically covers technical controls such as encryption and audit logs in a TypeScript healthcare application?

Accepted Answer

Technical Safeguards

Answer

HIPAA Technical Safeguards cover technology-based controls—encryption, access controls, and audit logging—used to protect ePHI.

Question 5

When a TypeScript npm package includes code from multiple contributors, which practice best documents license obligations for downstream users?

Accepted Answer

Including a NOTICE or THIRD-PARTY-LICENSES file that lists each component's license

Answer

A NOTICE or THIRD-PARTY-LICENSES file is the standard mechanism for attributing third-party code and satisfying notice requirements of licenses like Apache 2.0.

TypeScript Practice Test

TypeScript Practice Test

TypeScript Regulatory Compliance & Legal Framework 2