Understand Regulatory Frameworks CY0-001 Practice Questions (Page 5)

Questions 21–25

1. 21application · medium

   A US-based AI company processes personal data of EU citizens. The company has no physical presence in the EU. Under GDPR, which regulatory body has the authority to enforce compliance against this company?

   • AThe European Commission
   • BThe Federal Trade Commission (FTC)
   • CThe Data Protection Authority (DPA) in the EU member state where the company's EU representative is designated.
   • DThe European Data Protection Supervisor (EDPS)
   Reveal Solution Discussion Select an answer first
2. 22expert · hard

   A multinational AI company develops a chatbot that collects personal data from users in the EU, the US, and Japan. The company is subject to GDPR, CCPA/CPRA, and Japan's APPI. Which compliance challenge is most significant when operating across these three jurisdictions?

   • AThe definitions of personal data and the scope of rights differ, requiring a unified but flexible compliance approach.
   • BGDPR requires data localization, while CCPA/CPRA and APPI do not.
   • CCCPA/CPRA applies to all companies, while GDPR and APPI have revenue thresholds.
   • DJapan's APPI is identical to GDPR, so the company can comply with both using the same processes.
   Reveal Solution Discussion Select an answer first
4. 23foundation · easy

   How can a regulatory framework like GDPR influence the development of an AI model that uses personal data?

   • AIt may require the development team to implement data minimization and purpose limitation in the model's design
   • BIt prohibits the use of any personal data in AI training datasets
   • CIt has no impact on AI development because regulations only apply after deployment
   • DIt requires the use of a specific machine learning algorithm for all models
   Reveal Solution Discussion Select an answer first
5. 24foundation · easy

   Which regulatory body is responsible for enforcing GDPR in the European Union?

   • AThe Federal Trade Commission (FTC)
   • BThe World Health Organization (WHO)
   • CEach EU member state's data protection authority (DPA)
   • DThe European Central Bank (ECB)
   Reveal Solution Discussion Select an answer first
6. 25foundation · easy

   Which regulatory framework specifically addresses the protection of personal data of individuals in the European Union?

   • ASOX (Sarbanes-Oxley Act)
   • BHIPAA (Health Insurance Portability and Accountability Act)
   • CPCI DSS (Payment Card Industry Data Security Standard)
   • DGDPR (General Data Protection Regulation)
   Reveal Solution Discussion Select an answer first