WordPress Regulatory Frameworks & Compliance 4

Question 1

Which WordPress built-in tool allows site administrators to erase personal data for a specific user to comply with GDPR's right to erasure?

Accepted Answer

Tools > Erase Personal Data

Answer

WordPress includes a built-in 'Erase Personal Data' tool under the Tools menu to process right-to-erasure requests.

Question 2

A WordPress plugin that stores user data in a third country outside the EEA must ensure which of the following under GDPR?

Accepted Answer

An adequacy decision, SCCs, or other valid transfer mechanism exists

Answer

GDPR restricts data transfers outside the EEA unless an adequacy decision, Standard Contractual Clauses, or another approved transfer mechanism is in place.

Question 3

Under the Americans with Disabilities Act (ADA), WordPress websites serving US customers are increasingly expected to conform to which accessibility standard?

Accepted Answer

WCAG 2.1 Level AA

Answer

Courts and the DOJ increasingly expect US websites to meet WCAG 2.1 Level AA guidelines as the standard for ADA web accessibility compliance.

Question 4

What is the purpose of a Privacy Policy page on a WordPress site under CCPA and GDPR requirements?

Accepted Answer

To inform users about what personal data is collected and how it is used

Answer

Both CCPA and GDPR require a Privacy Policy that transparently informs users about data collection practices, purposes, and user rights.

Question 5

Which security practice is required by PCI DSS for WordPress sites that store, process, or transmit cardholder data?

Accepted Answer

Regular vulnerability scanning and penetration testing

Answer

PCI DSS Requirement 11 mandates regular vulnerability scanning and penetration testing to identify security weaknesses in systems handling cardholder data.

WordPress Practice Test

WordPress Practice Test

WordPress Regulatory Frameworks & Compliance 4