1. Regulatory & Data Protection Architecture intermediate

    A marketplace group of Flipkart's shape trades through three legal entities in five markets. In 2027 a dispute asks which consumer-protection and data rules applied to an order placed in 2025. The code resolves the regime at request time from the customer's IP address and the current entity mapping. Design the layer that answers the question.

    3 min answer regime determinationlineageauditmulti-entity
  2. Regulatory & Data Protection Architecture beginner Multiple choice

    A support tool's credentials are found in a public repository. The GDPR's Article 33 gives 72 hours from becoming aware of a personal data breach to notify the supervisory authority, including the categories and approximate number of data subjects affected. Which capability decides whether you can answer in time?

    3 min answer gdprbreach-notificationdata-inventoryaccess-logs
  3. Regulatory & Data Protection Architecture advanced

    How do you make a data residency requirement a structural property rather than a policy?

    2 min answer residencycellscontrol-planeenforcement
  4. Regulatory & Data Protection Architecture beginner

    Marketing has signed with an analytics vendor and the vendor's SDK is due in next week's mobile release. Legal asks whether you are the controller or the processor for what that SDK collects. Why does the answer change the architecture rather than only the paperwork?

    2 min answer controllerprocessorsub-processorssdk
  5. Regulatory Constraints advanced

    A company operates one platform across many countries with different regulatory regimes, payment rails and tax rules. How should the architecture handle variation without forking per country?

    2 min answer mercado-libremulti-countryregulationconfiguration
  6. Regulatory Constraints advanced

    A financial-services group has 14 months before a new operational-resilience regime applies. It must hold a complete register of third-party arrangements supporting critical functions, documented and tested exit plans for each, and contractual clauses that roughly 40% of its 180 supplier contracts do not contain. The programme plans to build the register first because it is the visible deliverable. Sequence the work properly and name the point of no return.

    3 min answer regulationthird-party risksequencingexit plans
  7. Regulatory Constraints advanced

    A mobility platform operates across several countries with different licensing, data residency, payment and labour regulations. How should regulation shape the architecture?

    2 min answer regulationmulti-marketresidencyconfigurability
  8. Regulatory Constraints advanced

    An insurance platform's product roadmap is repeatedly disrupted by regulatory change. How should regulation be incorporated into the architecture rather than reacted to?

    2 min answer ackodigitregulationconfigurability
  9. Regulatory Reporting Pipelines advanced

    A regulatory return was submitted three months ago. A reference-data correction arrives showing that a counterparty classification was wrong for 14 months, which changes figures in that return and in the five before it. What happens next, and what must the pipeline have supported for this to be manageable?

    3 min answer regulatory-reportingrestatementbitemporallineage
  10. Regulatory Reporting Pipelines advanced

    A regulatory submission is found to be wrong. You must produce an amended figure and explain the difference. What must the pipeline have supported?

    2 min answer reportinglineagereproducibility
  11. Regulatory Reporting Pipelines advanced

    An insurer must submit regulatory reports whose format and content change periodically. How should the pipeline be designed?

    2 min answer digitreportingmappingreproducibility
  12. Regulatory Reporting Pipelines advanced

    Design a pipeline producing periodic regulatory submissions where every figure must be defensible years later.

    1 min answer regulatory-reportingreproducibilitylineagecontrols