WordPress Regulatory Frameworks & Compliance 3

Question 1

Which WordPress feature allows users to request and download all personal data the site holds about them, supporting GDPR compliance?

Accepted Answer

Export Personal Data tool in Tools menu

Answer

WordPress includes a built-in 'Export Personal Data' tool under the Tools menu to fulfill GDPR data portability requests.

Question 2

Under COPPA, what is the minimum age threshold below which websites must obtain verifiable parental consent before collecting children's personal information in the US?

Accepted Answer

13

Answer

COPPA (Children's Online Privacy Protection Act) requires verifiable parental consent before collecting personal information from children under 13.

Question 3

A WordPress site uses Google Analytics to track visitors. Under GDPR, this data transfer to Google servers in the US requires which safeguard?

Accepted Answer

Standard Contractual Clauses or equivalent transfer mechanism

Answer

Transferring personal data outside the EU requires a legal transfer mechanism such as Standard Contractual Clauses (SCCs) under GDPR.

Question 4

What is a Data Processing Agreement (DPA) required for under GDPR when a WordPress site uses a third-party email service?

Accepted Answer

To legally define how the processor handles personal data on behalf of the controller

Answer

A DPA is a contract that defines how a data processor (email service) handles personal data on behalf of the data controller (the site owner).

Question 5

Which US federal law governs the sending of commercial emails and requires WordPress sites to include an unsubscribe mechanism?

Accepted Answer

CAN-SPAM Act

Answer

The CAN-SPAM Act requires commercial emails to include a clear unsubscribe mechanism and honor opt-out requests within 10 business days.

WordPress Practice Test

WordPress Practice Test

WordPress Regulatory Frameworks & Compliance 3