Which privacy and advertising regulations commonly affect content across the US and EU, and how should organizations comply?

• A. GDPR (EU), CCPA/CPRA (California), and FTC truth-in-advertising; comply with consent, rights, disclosures, and data handling practices.
• B. Only GDPR; implement global standardization.
• C. Only CCPA; ignore others.
• D. Only FTC; focus on self-regulation.

Answer: (A)

The idea being tested is that privacy and advertising rules shaping content across the US and EU come from a mix of major frameworks, and organizations need a cross-border compliance approach. The best answer combines the EU's GDPR with California’s CPRA/CCPA and the US Federal Trade Commission’s truth-in-advertising standards. GDPR governs how personal data is collected, stored, and used in the EU, requiring a lawful basis for processing, clear consent where needed, strong transparency, data subject rights (such as access and deletion), and robust security measures. CPRA/CCPA extend rights for California residents—like access, deletion, and the option to opt out of data sale or sharing—and introduce enhanced obligations around sensitive data and data practices. The FTC enforces that advertising is truthful and substantiated, with clear disclosures and avoidance of deceptive claims. Together, these laws shape both how content can be targeted or personalized and how data about users is collected, stored, and disclosed, regardless of where the content is viewed.

To comply, organizations should implement a privacy program that includes clear, user-friendly notices; mechanisms to obtain and manage consent for tracking and marketing disclosures; processes for honoring user rights (access, deletion, opt-out); strong data minimization and security controls; and proper data transfer practices. They should also ensure advertising claims are truthful and substantiated, with appropriate disclosures and consent where required. In practice, this means mapping data flows, documenting processing activities, conducting privacy impact assessments, maintaining vendor and contract safeguards, and keeping notices and disclosures up to date for both EU and US audiences.