Practice Test Geeks(GMC) Growth Marketing Certification Practice Test
← All GMC Flashcard Decks

Regulatory Compliance Flashcards

7 cards from real GMC practice questions. Tap to flip, then mark Knew It or Still Learning — missed cards come back until you master them.

Read the first 7 Regulatory Compliance flashcards as text

  1. A marketer collects email addresses via a lead generation form. Under CAN-SPAM, which statement about the 'From' field is correct?

    Answer: It must accurately identify the person or business that initiated the message

    CAN-SPAM prohibits deceptive header information, requiring the 'From' field to accurately identify the sender who initiated the commercial email.

  2. What is 'purpose limitation' under GDPR, and how does it affect growth marketing re-targeting campaigns?

    Answer: Data collected for one purpose cannot be used for an incompatible purpose without a new legal basis

    GDPR Article 5(1)(b) requires that data be collected for specified, explicit purposes and not further processed in incompatible ways, which affects how remarketing audiences can be built.

  3. Under GDPR, a Data Protection Impact Assessment (DPIA) is mandatory when processing:

    Answer: Processing likely to result in high risk to individuals' rights and freedoms, such as large-scale profiling

    GDPR Article 35 requires a DPIA prior to processing that is likely to result in high risk, particularly for systematic profiling, large-scale sensitive data, or systematic public monitoring.

  4. An influencer receives a free product from a brand and posts about it without disclosure. Under the FTC, who bears primary responsibility?

    Answer: Both the brand and the influencer can be held liable

    The FTC holds both brands and influencers responsible for ensuring material connections are properly disclosed — brands must educate and monitor influencers they work with.

  5. A Canadian-targeted email marketing campaign must comply with which law that requires express or implied consent before sending commercial messages?

    Answer: CASL

    Canada's Anti-Spam Legislation (CASL) requires express or implied consent before sending Commercial Electronic Messages (CEMs) to Canadian recipients.

  6. Which GDPR principle requires that personal data be kept in a form that permits identification of data subjects for no longer than necessary?

    Answer: Storage limitation

    GDPR Article 5(1)(e) establishes the storage limitation principle, requiring personal data to be deleted or anonymized once the original processing purpose is fulfilled.

  7. A growth marketer wants to use dark patterns in a cookie consent banner to nudge users away from rejecting cookies. Under GDPR, this practice:

    Answer: Invalidates consent because it is not freely given, specific, informed, and unambiguous

    GDPR requires consent to be freely given, specific, informed, and unambiguous — dark patterns that manipulate choices render consent invalid according to EDPB guidance.