User Experience Design Regulatory Frameworks & Compliance 4

Question 1

Under GDPR, which legal basis allows a website to process user data for personalization without asking for explicit consent each session?

Accepted Answer

Legitimate interests (Article 6(1)(f)) after a balancing test

Answer

Legitimate interests can lawfully justify processing for personalization if a balancing test shows it doesn't override user rights and interests.

Question 2

The FTC's 'click-to-cancel' rule (announced 2023) primarily targets which UX practice?

Accepted Answer

Making subscription cancellation as difficult as sign-up

Answer

The FTC's click-to-cancel rule requires that canceling a subscription be as simple as the sign-up process, prohibiting manipulative retention flows.

Question 3

Which WCAG 2.1 success criterion addresses the need for users to be able to pause, stop, or hide moving or auto-updating content?

Accepted Answer

2.2.2 Pause, Stop, Hide

Answer

SC 2.2.2 requires that any moving, blinking, or scrolling content that starts automatically can be paused, stopped, or hidden by the user.

Question 4

A UX designer adds a 'Remember Me' checkbox on a login form. Under GDPR, storing an extended authentication token requires what action?

Accepted Answer

Explicit user consent via an opt-in mechanism, since it involves storing data on the user's device

Answer

Under GDPR and ePrivacy Directive, storing persistent cookies or tokens on a user's device beyond essential functionality requires prior, freely given consent.

Question 5

Section 508 was significantly updated in 2018 to align with which set of standards, replacing the original 2001 provisions?

Accepted Answer

WCAG 2.0 Level A and AA

Answer

The 2018 Section 508 refresh (the 'ICT Final Standards and Guidelines') adopted WCAG 2.0 Level A and AA as the technical standard for web and software accessibility.

User Experience Design Practice Test

User Experience Design Practice Test

User Experience Design Regulatory Frameworks & Compliance 4