Portfolio ↗

Quiz

2741 questions of the kind that actually get asked — in interviews, in architecture review boards, and by the person who has to run the thing at 3 AM. Every answer states the trade-off rather than the slogan, and says when the obvious choice is the wrong one.

All areas2741 Architecture Fundamentals81 Distributed Systems101 Data Architecture90 Cloud Architecture87 Networking86 API & Integration Architecture78 Reliability & Resilience99 Observability92 Performance & Capacity Engineering90 Security Architecture95 Cost Architecture & FinOps92 Business Architecture93 Architecture Communication91 Enterprise Architecture91 Legacy Modernization92 AI-Era Architecture96 Software Architecture & Engineering84 Architecture Patterns84 Architecture Decision-Making91 The Architect's Meta-Skills92 Delivery & Release Engineering93 Platform Engineering & Developer Experience92 Testing & Quality Architecture102 Data Platform Architecture98 Streaming & Real-Time Data93 Data Governance & Semantics91 Frontend & Experience Architecture91 Edge, Mobile & IoT88 Regulatory & Data Protection Architecture90 Assurance, Audit & Model Risk98
Difficulty Any beginner intermediate advanced

90 questions in Regulatory & Data Protection Architecture.

  1. Consent Architecture intermediate

    A customer withdrew marketing consent three weeks ago and is still receiving emails. The consent record is correct. Where is the failure?

    2 min answer consentintegrationcompliance
  2. Consent Architecture advanced

    A regulator asks how you ensure marketing consent withdrawal is honoured everywhere. What does the architecture need to show?

    2 min answer consentprivacypropagationevidence
  3. Consent Architecture advanced

    An insurance platform must record and honour consent across many purposes and channels. What must the architecture provide?

    2 min answer ackoconsentpurposeenforcement
  4. Consent Architecture advanced

    Consent must be captured, honoured across every system, and proven to a regulator. How should this be architected, and why do consent implementations usually fail?

    2 min answer consentgdprpurpose-limitationpropagation
  5. Consent Architecture advanced

    Design consent management for a publisher with advertising, analytics and personalisation across web and apps.

    1 min answer consentadtechpropagationaudit
  6. Cross-Border Transfer advanced Multiple choice

    A collaboration platform must move some personal data between jurisdictions. What mechanisms exist and how does architecture support them?

    1 min answer transferjurisdictionsafeguardsassessment
  7. Cross-Border Transfer advanced

    A platform must move personal data between jurisdictions. What does the architecture need to support, beyond the legal mechanism?

    2 min answer remotetransfermechanismsminimisation
  8. Cross-Border Transfer intermediate Multiple choice

    An EU-based SaaS product runs entirely in Frankfurt. Its 24-hour support rota includes engineers in a country without an adequacy decision, who can view customer records to diagnose issues. Legal flags this as a cross-border transfer. Which control best addresses the finding?

    3 min answer cross-border-transfersupport-accessdata-minimisationscc
  9. Cross-Border Transfer advanced

    Your SaaS vendor processes EU customer data in the US. Legal asks for supplementary measures. What can architecture offer?

    2 min answer gdprtransfersencryption
  10. Data Residency advanced

    A client says "our data must stay in country". What do you ask before designing anything?

    2 min answer residencycompliancerequirements
  11. Data Residency advanced

    A communications platform must keep customer data in-region for several markets. What does that actually require?

    1 min answer residencyregional-isolationroutingmetadata
  12. Data Residency advanced

    A delivery marketplace of Swiggy's shape serves five countries from two regions. Its India payments partner points at the Reserve Bank of India's directive of 6 April 2018 requiring payment system data to be stored only in India. Finance asks what a dedicated in-India cell would cost annually before the partnership is signed. Work the number and say what it rules out.

    3 min answer data-residencyrbicell-based-architectureunit-economics