Duration of the Exam

Home / Exams and Calls / Examination Specifications

DATA PROTECTION OFFICER EXAM SPECIFICATIONS

In accordance with the AEPD-DPD Certification Scheme v.1.3:

Duration of the Exam 

150 questions with 4 response options

  • The exam consists of 150 multiple-choice questions, with four answer options, of which only one will be valid. Each correct answer adds 1 point. Questions that are answered incorrectly and / or have not been answered will not be counted
  • 20% of the questions, that is, 30 questions, will describe a practical scenario (normative, organizational and / or technical) about which the question will be.
  • To pass the test, it is required to have obtained, at least, 112.5 points, having correctly answered 50% of the questions in each of the blocks or domains.
  • For the approval must have obtained, at least, 113 points.

Contents List.

The contents to be evaluated in the certification examination are integrated in the following domains or thematic areas according to the weightings indicated:
  • Domain 1 GENERAL REGULATION ON DATA PROTECTION.
    Regulatory compliance with European regulations, national regulations, European directive on ePrivacy. Guidelines and guides of the art.29 WP, etc.
  • Domain 2 ACTIVE RESPONSIBILITY.
    Evaluation and risk management of personal data processing; impact evaluation on data protection, data protection from design, default data protection, etc.
  • Domain 3 TECHNIQUES TO GUARANTEE COMPLIANCE WITH THE REGULATION ON DATA PROTECTION AND OTHER KNOWLEDGE.
    Security audits, data protection audits, etc.

Questions Blocks

The questions are distributed by Domains. Within these domains we will find theoretical and practical scenario questions. We show the composition below:
Domain I
50%, 75 questions, 15 of them with scenario.
Domain III
20%, 30 questions, 6 of them with scenario.
Domain II
30%, 45 questions, 9 of them with scenario.

    Important:

  • The examination for certification of Data Protection Officer can be done by means of an electronic certificate of a natural person issued under a pseudonym, to maintain the privacy of the student.
  • The results of the examination are confidential, until the publication in the registry as Certified Data Protection Officer.
  • The results of the examination are confidential, until the publication in the registry as Delegate of Data Protection Certificate.
  • The exam will be face-to-face. It can be done either using computer media or on paper, informing the candidate of the specific medium to be used prior to the examination.
  • In case of detecting identity theft, the Legal Department of the EC, will file the corresponding complaint with the competent authorities.