EXIN PDPP study guide
EXIN PDPP · Work through your exam, one topic at a time.
The EXIN Privacy and Data Protection Professional (PDPP) is an EXIN certification in the Data Protection & Security category of EXIN's certification portfolio. EXIN describes itself as an independent examining body offering certifications across AI, security, privacy and service management, and states that it has 40 years of experience and 450+ partners. Candidates should verify the current PDPP exam details, including question count, duration, passing score and price, directly with EXIN, because the public homepage does not publish them and this page therefore does not state them. The credential suits privacy officers, data protection coordinators, compliance and risk staff, legal counsel, IT and security professionals, and managers who handle personal data and need a structured, vendor-neutral grounding in privacy and data protection. The EXIN PDPP study guide has 4 sections and about 1,686 words.
01Privacy and Data Protection Fundamentals
This domain tests the vocabulary and first principles the rest of the exam assumes: what personal data is, when processing occurs, who is accountable for it, and which principles govern every processing operation. Expect definitional precision rather than policy opinion.
428 words, about 2 min02Legal and Regulatory Framework
This domain tests how the GDPR and related law apply in practice: territorial scope, lawful bases, special categories, data subject rights, international transfers, and enforcement. The exam favours scenario questions where you must identify the applicable rule and the responsible actor.
448 words, about 2 min03Privacy and Data Protection in Practice
This domain tests operational execution: impact assessments, records of processing, breach handling, the DPO role, privacy by design, and vendor management. Questions often ask what must happen, in what order, and who must act.
439 words, about 2 min04Governance, Accountability and Compliance
This domain tests how an organisation proves and sustains compliance: governance structures, policies, training, monitoring, audit, and evidence. The exam expects you to connect accountability under Article 5(2) and Article 24 to concrete management systems rather than to a single policy document.
371 words, about 2 min