{
  "question_text": "If a security breach affects 500 or more Florida residents, who must Rapido Facil Exchange Co. notify within 30 days?",
  "options": [
    "The Florida Department of Legal Affairs",
    "The federal government",
    "All customers who have ever done business with Rapido Facil Exchange Co.",
    "Legal counsel only — they handle all external notifications"
  ],
  "correct_answer": "The Florida Department of Legal Affairs",
  "correct_response": "Correct. When a breach affects 500 or more Florida residents, Rapido Facil Exchange Co. must notify the Florida Department of Legal Affairs within 30 days of determining the breach occurred.",
  "incorrect_response": "When a breach affects 500 or more Florida residents, Rapido Facil Exchange Co. must notify the Florida Department of Legal Affairs within 30 days. Legal counsel must also be contacted — but within 24 hours of discovering the breach, which is a separate, earlier step.",
  "unsure_response": null,
  "question_bank": [
    {
      "question_text": "When must customers receive a privacy notice from Rapido Facil Exchange Co.?",
      "options": [
        "When they first do business with Rapido Facil Exchange Co. and every year after that",
        "Only when they first do business with Rapido Facil Exchange Co.",
        "Every two years",
        "Only when Rapido Facil Exchange Co.'s privacy practices change"
      ],
      "correct_answer": "When they first do business with Rapido Facil Exchange Co. and every year after that",
      "correct_response": "Correct. Customers get a privacy notice the very first time they do business with Rapido Facil Exchange Co., and then once every year after that.",
      "incorrect_response": "Customers must receive a privacy notice at their first transaction — and then again every year. A one-time notice is not enough. The annual notice is always required.",
      "unsure_response": null
    },
    {
      "question_text": "If a customer asks Rapido Facil Exchange Co. to stop sharing their information, how long does Rapido Facil Exchange Co. have to honor that request?",
      "options": [
        "30 days",
        "24 hours",
        "7 days",
        "60 days"
      ],
      "correct_answer": "30 days",
      "correct_response": "Correct. Rapido Facil Exchange Co. must honor a customer's opt-out request within 30 days. This protects the customer's legal rights.",
      "incorrect_response": "Opt-out requests must be honored within 30 days. Waiting longer than that violates the customer's rights under federal privacy law.",
      "unsure_response": null
    }
  ],
  "enrichment_content": "<p><strong>Three simple privacy rules to remember:</strong></p><ul><li>Give customers a privacy notice the <strong>first time</strong> they do business with you — and <strong>every year</strong> after.</li><li>If a customer asks to opt out, honor it within <strong>30 days</strong>.</li><li>If a breach affects 500 or more Florida residents, notify the <strong>Florida Department of Legal Affairs within 30 days</strong>.</li></ul>"
}