CDPSE®: Certified Data Privacy Solutions Engineer

Module 1: understanding data governance

• Internal and external personal data protection requirements for organisational programmes and practices relating to governance and risk management.
• Assessing privacy policies, programmes and practices for compliance with legal and regulatory requirements and industry best practices.
• Privacy impact assessments and other privacy-focused assessments.
• Developing procedures aligned with privacy policies and business needs.
• Implementing procedures in accordance with privacy policies.
• Managing and assessing contracts, service levels and practices of vendors and other third parties.
• The data privacy incident management process.
• Working with cybersecurity teams on security risk assessments to ensure privacy and mitigate risk.
• Working with other professionals to ensure privacy programmes and practices are followed during the design, development and implementation of systems, applications and infrastructure.
• Developing a process to prioritise privacy practices.
• Developing, monitoring and reporting on performance metrics and trends relating to privacy practices.
• Reporting the status and outcomes of privacy programmes and practices to relevant stakeholders.
• Establishing privacy training and user awareness.
• Identifying issues to resolve and opportunities to improve processes.

Module 2: understanding privacy architecture

• Conducting privacy impact assessments and other assessments to identify relevant tracking technologies and technical privacy controls.
• Developing privacy control procedures in accordance with organisational policies.
• Implementing privacy architecture procedures.
• Working with cybersecurity teams on security risk assessments to ensure privacy and mitigate risk.
• Working with other practitioners to ensure privacy programmes and practices are followed during the design, development and implementation of systems, applications and infrastructure.
• Assessing enterprise and information architecture to ensure privacy principles and considerations are incorporated from the outset.
• Assessing privacy-related technological developments and changes in the regulatory environment.
• Identifying, validating and implementing appropriate privacy and security controls aligned with data classification procedures.

Module 3: understanding data lifecycle management

• Identifying internal and external privacy requirements relating to organisational data lifecycle practices.
• Privacy impact assessments and other assessments relating to organisational data lifecycle practices.
• Developing data lifecycle procedures aligned with privacy policies and business needs.
• Implementing data lifecycle procedures aligned with privacy policies.
• Working with other practitioners to ensure privacy programmes and practices are followed during the design, development and implementation of systems, applications and infrastructure.
• Assessing enterprise and information architecture to ensure it supports privacy-by-design principles and data lifecycle considerations.
• Identifying, validating and implementing security and privacy controls aligned with data classification procedures.
• Designing, implementing and monitoring processes and procedures to keep data flow inventories and records up to date.

Module 4: preparing for the CDPSE exam

• An introduction to exam question types.
• A full mock exam with detailed answers and results analysis.
• Exam success tips and strategies: time management, question-reading techniques and stress management.