Chiron Exams All exams Ask for access

All exams › EXIN

PDPF practice examsIn development

EXIN Privacy & Data Protection Foundation

EXIN · beginner · 60 minutes

In developmentThis course is still being brought to our full standard. The questions and notes are usable, but they have not yet been checked line by line against the vendor’s own training.

GDPR fundamentals from the Dutch examination body already behind CISEF in this catalogue: what personal data is and when pseudonymised data stays in scope, the controller and processor split, the six principles and the six lawful bases, then the data subject rights with their real limits, impact assessments, the 72-hour breach clock, transfers outside the EEA and how supervision and fines work.

What you get

120practice questions
3full papers of 40
2course chapters · 12 minutes
100%answers explained

Papers are cut from the bank and weighted like the real exam, and no question appears in two of them. Every wrong answer comes back on later days until you have it right.

What the exam covers

The domains our question bank is built on. We have not yet transcribed this vendor’s own outline for this exam.

Personal data, the principles and the lawful basesNot published
Rights, obligations, breaches and supervisionNot published

Two sample questions

Two of the 120, with the answer and the explanation.

1. Which content should an impact assessment include?

  1. Only the name of the controller and the processor
  2. The processing, its necessity, the risks and the measures addressing them — correct
  3. The results of the access requests received so far
  4. The record of every breach the organisation has had

Why: The assessment describes the processing, assesses necessity and proportionality, identifies risks, and records the mitigations.

2. Which power does a supervisory authority hold?

  1. Only the power to publish advisory guidance
  2. Investigation, corrective orders and administrative fines — correct
  3. Only the power to approve adequacy decisions
  4. Only the power to appoint data protection officers

Why: Supervisory authorities can investigate, order corrective action, and impose administrative fines.

The real PDPF exam

Length60 minutes
Questions40
Pass mark65%, or 26 of 40
PriceSold through EXIN and accredited training providers; the price varies by region
Recommended before you sit itNone. No legal background is required.
Valid forDoes not expire

Exam facts as published by EXIN; always check the vendor’s page before you book.

Study PDPF with Chiron

Chiron is invitation-only while we are in beta, and nothing is for sale yet: invited accounts use every paper, drill and course note for free.