CDPSE Study Guide 2026
Everything you need to pass the CDPSE exam in one place: the exam format, every topic to study, real practice questions with explanations, flashcards, and full-length practice tests. Free, no sign-up needed.
📋 CDPSE Exam Format at a Glance
📚 CDPSE Topics to Study (59)
✍️ Sample CDPSE Questions & Answers
1. A privacy engineer needs to prevent internal analysts from seeing raw PII in a production database while still enabling query-based analytics. Which control is MOST appropriate?
Dynamic data masking presents masked values to unauthorized users at query time without altering the underlying stored data, balancing utility and privacy.
2. Which governance principle ensures that individuals are informed about how their personal data will be used at or before the time of collection?
Openness and transparency require organizations to make their data processing practices known to individuals before or at the point of collection.
3. What is the key difference between a privacy audit and a security audit?
While overlapping, privacy audits focus on regulatory compliance, individual rights, and data use legitimacy, whereas security audits focus on technical protections against unauthorized access.
4. Which metric is MOST useful for evaluating incident response effectiveness from a privacy perspective?
Mean time to detect and contain directly measures the speed and efficiency of the incident response process, minimizing harm to data subjects.
5. Which of the following best describes a 'data subject' under GDPR?
A data subject is a living, identified or identifiable natural person to whom personal data relates.
6. Which of the following correctly distinguishes pseudonymization from anonymization under GDPR?
GDPR Recital 26 clarifies that pseudonymized data remains personal data because it can be re-identified using separately held information, while truly anonymized data falls outside GDPR scope.