CDPO/FR

It is a multiple-choice examination delivered in French. The number of questions, the duration and the scoring method are set by the certifying body, which publishes the current specification on its own website; check there before booking, because this page does not restate figures that may have changed.

Candidates with solid GDPR grounding usually find the European principles manageable and lose marks on French specifics: CNIL référentiels, sector rules for health and HR, and the distinction between the CNIL and the courts. The difficulty lies in precision, not volume: questions often turn on one word in a scenario.

Retake rules, waiting periods and any additional fees are defined by the certifying organisation and are not fixed here. Consult its official candidate handbook or contact it directly before scheduling a second attempt, and use the diagnostic breakdown of your first result to target the domains where you lost the most marks.

Most working practitioners need several weeks of regular study rather than a single intensive block. A workable pattern is two to three sessions per week: one to rebuild article-level foundations, one to work French-specific doctrine, and one for timed scenario practice with a written justification for each answer you choose.

Start with the principles and legal bases, since almost every scenario question depends on them. Then take governance, security and breach notification together, followed by transfers and sensitive data. Leave marketing and cookies, and audit and documentation, for last: they are narrower and easier to consolidate once the foundations are secure.

Answering from intuition instead of identifying the controlling article; confusing the roles of controller, processor and DPO; mixing up notification deadlines and to whom they apply; and treating French rules as identical to the GDPR baseline. Another frequent error is ignoring the question's decisive detail, such as who determined the purpose of the processing.

Not every number, but you should be able to place key provisions confidently: the principles article, the legal bases, the breach notification timeline, the transfer chapter, and the French law provisions on CNIL powers and sector formalities. Knowing where a rule lives helps you eliminate plausible but wrong options under time pressure.

No. This is independent study material written for candidates preparing on their own. It is not produced, endorsed or reviewed by the certifying body, and it does not reproduce any official question bank. Always verify exam logistics and the current syllabus against the official source before you rely on them.