Compliance.

Regulatory compliance and data governance for developers. Covers 8 topics.

• Compliance · 1 of 3

  SOC 2 Controls

  What does a SOC 2 Type 2 report attest to that a SOC 2 Type 1 report does not?

  AThat the controls were suitably designed as of a specific dateBThat the controls operated effectively over a review periodCThat the auditor tested controls over financial statementsDThat the company complies with a named data protection law

• Compliance · 2 of 3

  Incident Response Planning

  A vendor that processes personal records on a company's behalf discovers a breach. Under GDPR Article 33, which party is responsible for notifying the supervisory authority?

  ABoth parties, jointlyBThe data controllerCEach party's DPODThe data processor

• Compliance · 3 of 3

  Privacy by Design

  A new ML feature uses historical user data without revisiting consent assumptions. What is needed?

  APurpose compatibility and lawful basis reassessment before reuseBTechnical privacy review by the engineering team during implementationCUser notification via email about the new feature using their dataDFeature flag rollout limiting exposure to a small user percentage first