What is a common exam focus when studying FACT Act compliance?

• A. Understanding consumer rights (free reports, fraud alerts, and freezes), and obligations for businesses (Red Flags Rule, Disposal Rule, breach notification, and permissible uses) and enforcement.
• B. Fines and penalties for noncompliance.
• C. How to file a lawsuit against a credit bureau.
• D. How to design a secure IT infrastructure.

Answer: (A)

The focus is on consumer protections and business duties under the FACT Act—what rights consumers have and what obligations entities have to protect and properly handle credit information. This is why the best answer highlights both the rights side (free credit reports, fraud alerts, and credit freezes) and the duties side (Red Flags Rule, Disposal Rule, breach notification, and permissible uses) along with enforcement. These elements together represent the practical, exam-ready areas of FACT Act compliance: how consumers can monitor and control access to their information and what steps businesses must take to prevent identity theft, securely dispose of data, notify when breaches occur, and limit permissible uses.

Other choices miss the core focus. Fines and penalties are part of enforcement but not the primary learning target—it's about the actual rights and obligations. Filing lawsuits against a credit bureau and general IT security design are not the typical FACT Act compliance topics tested; they fall outside the primary consumer-protection and organizational-responsibility framework the exam emphasizes.