Portfolio ↗

Quiz

2707 questions of the kind that actually get asked — in interviews, in architecture review boards, and by the person who has to run the thing at 3 AM. Every answer states the trade-off rather than the slogan, and says when the obvious choice is the wrong one.

All areas2707 Architecture Fundamentals81 Distributed Systems101 Data Architecture90 Cloud Architecture87 Networking86 API & Integration Architecture78 Reliability & Resilience88 Observability81 Performance & Capacity Engineering90 Security Architecture95 Cost Architecture & FinOps92 Business Architecture93 Architecture Communication91 Enterprise Architecture91 Legacy Modernization92 AI-Era Architecture96 Software Architecture & Engineering84 Architecture Patterns84 Architecture Decision-Making91 The Architect's Meta-Skills92 Delivery & Release Engineering93 Platform Engineering & Developer Experience92 Testing & Quality Architecture90 Data Platform Architecture98 Streaming & Real-Time Data93 Data Governance & Semantics91 Frontend & Experience Architecture91 Edge, Mobile & IoT88 Regulatory & Data Protection Architecture90 Assurance, Audit & Model Risk98
Difficulty Any beginner intermediate advanced

74 questions in Regulatory & Data Protection Architecture.

  1. Consent Architecture advanced

    A regulator asks how you ensure marketing consent withdrawal is honoured everywhere. What does the architecture need to show?

    2 min answer consentprivacypropagationevidence
  2. Consent Architecture advanced

    An insurance platform must record and honour consent across many purposes and channels. What must the architecture provide?

    2 min answer ackoconsentpurposeenforcement
  3. Consent Architecture advanced

    Consent must be captured, honoured across every system, and proven to a regulator. How should this be architected, and why do consent implementations usually fail?

    2 min answer consentgdprpurpose-limitationpropagation
  4. Consent Architecture advanced

    Design consent management for a publisher with advertising, analytics and personalisation across web and apps.

    1 min answer consentadtechpropagationaudit
  5. Cross-Border Transfer advanced Multiple choice

    A collaboration platform must move some personal data between jurisdictions. What mechanisms exist and how does architecture support them?

    1 min answer transferjurisdictionsafeguardsassessment
  6. Cross-Border Transfer advanced

    A platform must move personal data between jurisdictions. What does the architecture need to support, beyond the legal mechanism?

    2 min answer remotetransfermechanismsminimisation
  7. Cross-Border Transfer advanced

    Your SaaS vendor processes EU customer data in the US. Legal asks for supplementary measures. What can architecture offer?

    2 min answer gdprtransfersencryption
  8. Data Residency advanced

    A client says "our data must stay in country". What do you ask before designing anything?

    2 min answer residencycompliancerequirements
  9. Data Residency advanced

    A communications platform must keep customer data in-region for several markets. What does that actually require?

    1 min answer residencyregional-isolationroutingmetadata
  10. Data Residency advanced

    A delivery marketplace of Swiggy's shape serves five countries from two regions. Its India payments partner points at the Reserve Bank of India's directive of 6 April 2018 requiring payment system data to be stored only in India. Finance asks what a dedicated in-India cell would cost annually before the partnership is signed. Work the number and say what it rules out.

    3 min answer data-residencyrbicell-based-architectureunit-economics
  11. Data Residency advanced

    A global payroll platform must keep certain data within specific jurisdictions. What does that force into the architecture?

    2 min answer deelremoteresidencyregional
  12. Data Residency advanced

    A product must keep certain customers' data within specific jurisdictions. What are the architectural options, and which parts are hardest?

    3 min answer residencysovereigntypartitioningmulti-region