GDPR Foundation
PECB Certified GDPR Foundation
More study resources
Cheat sheet
Keep the key ideas within reach.
ExploreKey terms
Get comfortable with the vocabulary.
ExploreStudy plan
Give each week a clear focus.
ExploreCommon mistakes
Understand the traps and how to avoid them.
ExploreCase studies
Put your knowledge to work in context.
ExploreExam-day guide
Prepare for the day ahead.
ExploreAbout this exam
The PECB Certified GDPR Foundation credential is an entry-level certificate for people who need a working grasp of the EU General Data Protection Regulation and the privacy principles behind it. PECB positions the training for individuals involved in personal data protection and information security, individuals seeking knowledge of the main privacy principles, and individuals interested in pursuing a career in data protection. No prerequisites apply, and the certificate itself requires only passing the exam, signing the PECB Code of Ethics, and no professional or project experience.
The course runs two days: Day 1 covers an introduction to GDPR and data protection principles, and Day 2 covers the GDPR requirements plus the certificate exam. The exam maps to two competency domains, each weighted 50 percent: fundamental principles and concepts of the GDPR, and the GDPR itself. PECB states the exam is available in several languages and directs candidates to its List of PECB Exams and Examination Rules and Policies for exam type and language details; item count, duration, and passing score are not published on the pages summarized here.
Preparation follows the official path: attend the training, whose material exceeds 200 pages with practical examples, work through the practice tests that PECB says resemble the certificate exam, and review the lecture examples and discussion exercises. Attendance also earns an attestation worth 14 CPD credits. Confirm current scheduling, delivery format, and pricing directly with PECB or an authorized partner.
What you'll study
About GDPR Foundation preparation
What format is the PECB GDPR Foundation exam?
PECB describes the exam as covering two competency domains and says it is available in several languages, directing candidates to the List of PECB Exams and the Examination Rules and Policies for exam type and language details. The page does not state the item count or whether questions are multiple choice, so verify the current format there before booking.
How long is the exam and what score do I need to pass?
Neither the duration nor the passing score appears on the PECB pages summarized here. Because these details are set in the Examination Rules and Policies rather than the course page, check that document or contact PECB support directly. Do not rely on figures quoted in forums, which may reflect older exam versions.
What happens if I fail the exam?
PECB states that in case of exam failure you can retake the exam within 12 months for free. That retake window is the main safety net for a foundation-level exam, so book your first attempt with enough calendar room to schedule a second one inside the 12 months if needed.
Do I need work experience or a project to get the certificate?
No. The certificate requirements table lists passing the PECB GDPR Foundation exam, no professional experience, no DPMS project experience, and signing the PECB Code of Ethics as the only other requirement. That makes this a genuinely entry-level credential, unlike PECB's implementer and manager level certifications.
How should I order my study across the two days?
Follow the official agenda: Day 1 is the introduction to GDPR and data protection principles, Day 2 is the GDPR requirements and the certificate exam. Secure the terminology and principles first, since the second domain assumes them. Then work through the practice tests, which PECB says are similar to the certificate exam, and revisit any domain where you score weakly.
How is the exam weighted across topics?
PECB lists two competency domains of equal weight: Domain 1, fundamental principles and concepts of the GDPR, and Domain 2, the GDPR itself. With a 50/50 split, neither half can carry you. Candidates who memorize articles but skip the underlying privacy principles, or the reverse, leave half the exam to chance.
What is the most common way candidates underprepare?
Treating it as pure memorization of regulation text. PECB's learning objectives include understanding the obligations, roles, and responsibilities of the Data Protection Officer and the concepts and methods for participating in implementing a compliance framework. Expect questions that apply principles to scenarios rather than ask you to recite article numbers.
What study material is included with the training?
PECB states that training material containing over 200 pages of information and practical examples is distributed, that lecture sessions are illustrated with practical questions and examples, and that practical exercises include examples and discussions. Attending also earns an attestation of course completion worth 14 CPD credits. Certificate and examination fees are included in the course price.
Is the training available online or in a classroom?
PECB's session listings show both live virtual online sessions and classroom sessions in countries such as the United Kingdom, the Netherlands, and Canada, delivered in English. Availability and locations change, so check the upcoming sessions list on the PECB course page or ask an authorized PECB partner about local dates.