Legal & Regulatory Compliance Flashcards
7 cards from real CEC practice questions. Tap to flip, then mark Knew It or Still Learning — missed cards come back until you master them.
Read the first 7 Legal & Regulatory Compliance flashcards as text
Which US federal law requires companies to notify consumers when their unencrypted personal information may have been accessed in a data breach?
Answer: There is no single federal breach notification law — it is governed by state laws
The US has no single federal data breach notification law; instead, all 50 states have enacted their own breach notification statutes with varying requirements.
An ecommerce retailer wants to use dynamic pricing that charges different customers different prices. Under US law, this practice is:
Answer: Generally legal but prohibited if based on protected class characteristics
Dynamic pricing is generally legal in the US but becomes unlawful price discrimination when pricing differentials are based on protected class characteristics such as race or national origin.
Under GDPR, a 'data processor' differs from a 'data controller' in that the processor:
Answer: Processes data on behalf of the controller without determining processing purposes
A data processor acts on the controller's instructions and does not independently determine the purpose or means of processing, though processors still have direct GDPR obligations.
A US ecommerce site uses behavioral tracking cookies. Under which regulatory framework must it obtain informed consent before placing non-essential cookies on EU visitors' browsers?
Answer: ePrivacy Directive (Cookie Law) and GDPR together
The ePrivacy Directive requires prior informed consent for non-essential cookies, while GDPR governs the personal data collected through those cookies, making both applicable.
The FTC's 'Made in USA' standard for ecommerce product labeling requires that:
Answer: All or virtually all of the product must be made in the US
The FTC's 'Made in USA' standard requires that all or virtually all significant parts, processing, and labor are US-origin, with no or negligible foreign content.
Which doctrine allows trademark owners to prevent use of their marks in paid search advertising keyword targeting without authorization?
Answer: Initial interest confusion doctrine
The initial interest confusion doctrine holds that using a competitor's trademark as a paid search keyword can constitute infringement by creating confusion that diverts consumers, even if cleared up before purchase.
Under the Uniform Electronic Transactions Act (UETA) and E-SIGN Act, electronic signatures on ecommerce contracts are:
Answer: Generally legally equivalent to handwritten signatures
Both UETA and the federal E-SIGN Act establish that electronic signatures have the same legal effect as handwritten signatures for most commercial and consumer contracts.