User Experience Design Regulatory Frameworks & Compliance 5

Question 1

A UX designer notices that a cookie consent banner uses a large, colorful 'Accept All' button but a tiny gray 'Manage Preferences' link. Which regulatory body would classify this as non-compliant and why?

Accepted Answer

EU Data Protection Authorities, because asymmetric choice design compromises freely given GDPR consent

Answer

EU DPAs have ruled that visually imbalanced consent interfaces (nudging toward acceptance) undermine the requirement that GDPR consent be freely given and equally easy to refuse.

Question 2

Under the Americans with Disabilities Act Title III, which type of business is most clearly obligated to ensure its website meets accessibility standards?

Accepted Answer

A place of public accommodation (e.g., retail, restaurant, hotel) with a commercial website

Answer

ADA Title III applies to places of public accommodation, and courts have extended this to their websites, requiring accessible digital experiences for customers.

Question 3

Which WCAG 2.1 principle is violated when a form error message only uses red color to indicate invalid fields, with no text label or icon?

Accepted Answer

Perceivable (specifically, not relying solely on color to convey information)

Answer

WCAG SC 1.4.1 (Use of Color) under the Perceivable principle requires that color not be the only visual means of conveying information such as form errors.

Question 4

The EU's Digital Services Act (DSA) imposes which specific UX obligation on very large online platforms (VLOPs)?

Accepted Answer

Offering users at least one recommendation system option not based on profiling

Answer

DSA Article 38 requires VLOPs to offer users at least one recommendation system not based on profiling, giving users more control over their content feeds.

Question 5

A healthcare UX team wants to conduct usability testing with participants who will interact with screens showing real patient data. What HIPAA safeguard must be implemented?

Accepted Answer

A Business Associate Agreement (BAA) and de-identification or authorization of the data before exposure

Answer

Exposing PHI during usability testing requires either full de-identification of the data or participant authorization, plus a BAA with any third-party testing vendor.

User Experience Design Practice Test

User Experience Design Practice Test

User Experience Design Regulatory Frameworks & Compliance 5