PECB CDPO case studies
PECB CDPO · Put your knowledge to work in context.
The PECB Certified Data Protection Officer (CDPO) is a professional credential offered in the privacy and data protection space. This page is an independent study resource built for candidates preparing for the CDPO exam; it is not affiliated with, endorsed by, or operated by PECB, and it does not reproduce any official question bank. The PECB CDPO case studies are 5 cases and about 3,851 words.
1Cookie Banner, California Request, and an EU Access Request at a Berlin SaaS Company
Northwind Analytics GmbH is a 240-person SaaS company headquartered in Berlin with a sales office in San Francisco. It processes account data for 38,000 business customers, of whom 4,200 are California residents; its marketing site uses a cookie banner where analytics and advertising cookies are pre-selected and users must untick them.
873 words, about 4 min2A DPO Who Is Also VP of IT Security at a Digital Therapeutics Company
Helios Health is a 900-employee digital therapeutics company in Amsterdam. Its DPO, appointed voluntarily in 2021, is also the VP of IT Security and reports to the CTO; she chairs the security committee and signs off on penetration-test remediation.
789 words, about 4 min3Facial-Recognition Turnstiles in Warehouses: DPIA and Prior Consultation
TransEuropa Logistics operates 14 warehouses and employs 3,100 staff in three EU countries. It plans a 90-day pilot of facial-recognition turnstiles at two warehouses to replace badge entry, citing time theft costing EUR 410,000 last year.
740 words, about 4 min4Privacy Programme Roll-Out at a Six-Country Retailer with a Nine-Month Deadline
Verdant Retail Group operates 210 stores in six countries with 4,800 employees and 180 active vendors. A privacy programme was launched 18 months ago: the ROPA covers about 40% of processing activities, mandatory training completion is 62%, and the vendor register lists contract dates but not data categories or transfer mechanisms.
705 words, about 4 min5Global HR Data Transfers, a New Owner, and a Works Council Request
Alpine Biotech AG, headquartered in Basel, runs clinical-trial operations for 12,000 participants across the EU, UK, and Brazil. Its global HR platform is hosted by a US provider, and the parent company in Boston runs global performance reviews using data on 2,600 EU employees.
744 words, about 4 min