{
  "question_text": "If a security breach affects 500 or more Florida residents, who must Advanced Compliance Technology, Inc. notify within 30 days?",
  "options": [
    "The Florida Department of Legal Affairs",
    "The federal government",
    "All customers who have ever done business with Advanced Compliance Technology, Inc.",
    "Legal counsel only — they handle all external notifications"
  ],
  "correct_answer": "The Florida Department of Legal Affairs",
  "correct_response": "Correct. When a breach affects 500 or more Florida residents, Advanced Compliance Technology, Inc. must notify the Florida Department of Legal Affairs within 30 days of determining the breach occurred.",
  "incorrect_response": "When a breach affects 500 or more Florida residents, Advanced Compliance Technology, Inc. must notify the Florida Department of Legal Affairs within 30 days. Legal counsel must also be contacted — but within 24 hours of discovering the breach, which is a separate, earlier step.",
  "unsure_response": null,
  "question_bank": [
    {
      "question_text": "When must customers receive a privacy notice from Advanced Compliance Technology, Inc.?",
      "options": [
        "When they first do business with Advanced Compliance Technology, Inc. and every year after that",
        "Only when they first do business with Advanced Compliance Technology, Inc.",
        "Every two years",
        "Only when Advanced Compliance Technology, Inc.'s privacy practices change"
      ],
      "correct_answer": "When they first do business with Advanced Compliance Technology, Inc. and every year after that",
      "correct_response": "Correct. Customers get a privacy notice the very first time they do business with Advanced Compliance Technology, Inc., and then once every year after that.",
      "incorrect_response": "Customers must receive a privacy notice at their first transaction — and then again every year. A one-time notice is not enough. The annual notice is always required.",
      "unsure_response": null
    },
    {
      "question_text": "If a customer asks Advanced Compliance Technology, Inc. to stop sharing their information, how long does Advanced Compliance Technology, Inc. have to honor that request?",
      "options": [
        "30 days",
        "24 hours",
        "7 days",
        "60 days"
      ],
      "correct_answer": "30 days",
      "correct_response": "Correct. Advanced Compliance Technology, Inc. must honor a customer's opt-out request within 30 days. This protects the customer's legal rights.",
      "incorrect_response": "Opt-out requests must be honored within 30 days. Waiting longer than that violates the customer's rights under federal privacy law.",
      "unsure_response": null
    }
  ],
  "enrichment_content": "<p><strong>Three simple privacy rules to remember:</strong></p><ul><li>Give customers a privacy notice the <strong>first time</strong> they do business with you — and <strong>every year</strong> after.</li><li>If a customer asks to opt out, honor it within <strong>30 days</strong>.</li><li>If a breach affects 500 or more Florida residents, notify the <strong>Florida Department of Legal Affairs within 30 days</strong>.</li></ul>"
}