{
  "question_text": "Law enforcement contacts Rapido Facil Exchange Co. by phone and requests account records, but has not submitted a written request. What should you do?",
  "options": [
    "Log the contact but do not produce any records — a written request is required before records can be released",
    "Provide the records if the officer identifies their agency and badge number",
    "Tell the officer you will produce the records within 48 hours",
    "Transfer the request to the teller who handles the account"
  ],
  "correct_answer": "Log the contact but do not produce any records — a written request is required before records can be released",
  "correct_response": "A verbal or phone request — no matter who is asking — does not authorize records production. You must log the contact and decline to produce any records until a written request or subpoena has been received.",
  "incorrect_response": "The correct answer is to log the contact but not produce any records. A written request is required before anything is released. Agency identification and a badge number do not substitute for written legal process.",
  "unsure_response": null,
  "question_bank": [
    {
      "question_text": "A customer asks whether Rapido Facil Exchange Co. filed a report on their account. What must you do?",
      "options": [
        "Decline to answer — you must never confirm or deny that any such report exists",
        "Tell the customer that account reports are private and cannot be discussed",
        "Inform the customer that the compliance officer handles those questions",
        "Advise the customer that no report has been filed on their account"
      ],
      "correct_answer": "Decline to answer — you must never confirm or deny that any such report exists",
      "correct_response": "Federal law prohibits confirming or denying whether a Suspicious Activity Report exists — to anyone, including the customer. You must decline to answer entirely. You must never confirm or deny, for any reason.",
      "incorrect_response": "The correct answer is to decline to answer entirely. You cannot confirm, deny, or say anything about whether a report was filed — not even to redirect the customer to someone else for that specific question. This is a federal rule with no exceptions.",
      "unsure_response": null
    },
    {
      "question_text": "Your company receives a National Security Letter. What must you do before taking any other action?",
      "options": [
        "Call counsel immediately",
        "Write it down in the law enforcement contact log",
        "Gather all the records the letter requests",
        "Let your manager know about the letter"
      ],
      "correct_answer": "Call counsel immediately",
      "correct_response": "A National Security Letter requires immediate escalation to counsel before any other action — including logging or gathering records. Counsel must manage the letter's legal requirements before the response can proceed.",
      "incorrect_response": "The correct answer is to call counsel immediately. Unlike other law enforcement contacts, a National Security Letter must go to counsel before anything else — before logging, before gathering records, before informing your manager. Counsel must be involved from the very first step.",
      "unsure_response": null
    }
  ],
  "enrichment_content": "<p><strong>Key rules for handling law enforcement requests:</strong></p><ul><li><strong>Written request required:</strong> You cannot release any records based on a phone call or in-person verbal request — a written document like a subpoena is required first.</li><li><strong>SAR confidentiality:</strong> Never confirm or deny that a Suspicious Activity Report exists — to anyone, for any reason. This is a federal rule.</li><li><strong>National Security Letters:</strong> Call counsel first, before doing anything else. Keep its existence strictly confidential — only share with those required to respond.</li><li><strong>Retention:</strong> Keep all documentation — the original request, your response, copies of all records produced, and related correspondence — for at least five years in a secure, restricted file.</li></ul>"
}