100+ Free CDPSE Practice Questions
Pass your ISACA Certified Data Privacy Solutions Engineer exam on the first try — instant access, no signup required.
Which of these is the MOST important characteristic of a strong privacy strategy document?
Explore More ISACA Certifications
Continue into nearby exams from the same family. Each card keeps practice questions, study guides, flashcards, videos, and articles in one place.
More From This Family
Videos and articles for deeper review.
Key Facts: CDPSE Exam
120
Exam Questions
ISACA
3.5 hrs
Time Limit
ISACA
450/800
Passing Score
ISACA
39%
Privacy Engineering Weight
ISACA ECO June 2, 2025
$575
Exam Fee (Member)
ISACA
3 yrs
Privacy Experience
Required for certification
ISACA's Certified Data Privacy Solutions Engineer (CDPSE) is a privacy-engineering certification with a 120-question, 3.5-hour exam, a 200-800 scaled score, and a 450 passing threshold. The current ISACA Exam Content Outline (updated June 2, 2025) weights Privacy Governance at 20%, Privacy Risk Management and Compliance at 18%, Data Life Cycle Management at 23%, and Privacy Engineering at 39% — making engineering the dominant domain. The exam fee is $575 for ISACA members ($760 for nonmembers), plus a $50 application fee, with delivery through PSI test centers or remote proctoring. Certification requires three years of cumulative privacy experience across the CDPSE domains; the exam itself is open to anyone.
Sample CDPSE Practice Questions
Try these sample questions to test your CDPSE exam readiness. Each question includes a detailed explanation. Start the interactive quiz above for the full 100+ question experience with AI tutoring.
1Under GDPR, who is primarily responsible for ensuring that an organization's privacy program aligns with business strategy and applicable laws?
2Which document set establishes the highest-level expectations for how an organization handles personal data and is typically approved by the board or executive committee?
3An organization is forming a privacy steering committee. Which composition best supports cross-functional privacy governance?
4Under GDPR Article 37, which condition triggers a mandatory DPO appointment?
5Which role is primarily responsible for translating privacy requirements into technical and operational controls within engineering teams?
6An organization is selecting a privacy program framework. Which standard is purpose-built as a Privacy Information Management System extension to ISO/IEC 27001?
7Which NIST Privacy Framework function focuses on developing and implementing the organizational understanding to manage privacy risk?
8Which NIST Privacy Framework function specifically focuses on developing organizational policies, processes, and procedures to ensure privacy values are reflected throughout the enterprise?
9A board asks for evidence that the privacy program is operating effectively. Which set of metrics best demonstrates program performance?
10Which combination most accurately describes the GDPR concept of accountability under Article 5(2)?
About the CDPSE Exam
The ISACA Certified Data Privacy Solutions Engineer (CDPSE) is a technology-focused privacy certification for engineers, architects, and privacy practitioners who design, implement, and assess privacy solutions. It validates the ability to translate privacy strategy and regulatory obligations (GDPR, CCPA/CPRA, HIPAA, state and international laws) into technical and operational controls across governance, risk and compliance, data life cycle management, and privacy engineering — including privacy by design, privacy enhancing technologies, de-identification, consent management, DSAR workflows, and cross-border transfer architectures.
Assessment
120 multiple-choice questions covering Privacy Governance (20%), Privacy Risk Management and Compliance (18%), Data Life Cycle Management (23%), and Privacy Engineering (39%)
Time Limit
3.5 hours
Passing Score
450/800
Exam Fee
$575 (members) / $760 (non-members) plus $50 application fee (ISACA / PSI)
CDPSE Exam Content Outline
Privacy Governance
Privacy program structure, policies, roles (DPO, BISO, Privacy Officer), privacy steering committee, management oversight, NIST Privacy Framework (Identify-P, Govern-P, Control-P, Communicate-P, Protect-P), and ISO/IEC 27701 PIMS.
Privacy Risk Management and Compliance
PIA/DPIA and threshold analysis, NIST AI RMF, ISO 31000, GDPR (Articles 5-32, lawful basis, DSAR rights, 72-hour breach notification), CCPA/CPRA, HIPAA, COPPA, PIPEDA, GLBA, FERPA, state laws (VCDPA, CPA, CTDPA, UCPA, TDPSA, MHMDA, MODPA), DPDPA, LGPD, PIPL, and EU AI Act privacy provisions.
Data Life Cycle Management
Collection minimization, purpose limitation, retention schedule, deletion and erasure (right to be forgotten), data inventory and lineage, classification (Public/Internal/Confidential/Restricted), and data discovery tools (BigID, OneTrust, Securiti, Microsoft Purview, IBM Guardium).
Privacy Engineering
Privacy by design (Cavoukian) and privacy by default, FIPPs, PETs (AES-256, tokenization, format-preserving encryption, differential privacy, federated learning, homomorphic encryption, secure multi-party computation), k-anonymity/l-diversity/t-closeness, synthetic data, pseudonymization vs anonymization, NIST SP 800-188, HIPAA Safe Harbor 18 identifiers, expert determination, data flow mapping, trust boundaries, consent management (IAB TCF, Global Privacy Control), DSAR workflows, breach response, vendor due diligence (DPA, SCC, BCR, DPF), and cross-border transfer mechanisms.
How to Pass the CDPSE Exam
What You Need to Know
- Passing score: 450/800
- Assessment: 120 multiple-choice questions covering Privacy Governance (20%), Privacy Risk Management and Compliance (18%), Data Life Cycle Management (23%), and Privacy Engineering (39%)
- Time limit: 3.5 hours
- Exam fee: $575 (members) / $760 (non-members) plus $50 application fee
Keys to Passing
- Complete 500+ practice questions
- Score 80%+ consistently before scheduling
- Focus on highest-weighted sections
- Use our AI tutor for tough concepts
CDPSE Study Tips from Top Performers
Frequently Asked Questions
What is the ISACA CDPSE exam format?
The CDPSE exam contains 120 multiple-choice questions with a 3.5-hour (210-minute) time limit. ISACA reports scores on a 200-800 scaled scale, and candidates must earn 450 or higher to pass. The exam is delivered through PSI test centers or remote online proctoring.
What are the current CDPSE domain weights?
Per the ISACA Exam Content Outline updated June 2, 2025, CDPSE has four domains: Privacy Governance (20%), Privacy Risk Management and Compliance (18%), Data Life Cycle Management (23%), and Privacy Engineering (39%). Privacy Engineering is the dominant domain at 39%, reflecting the credential's hands-on technical focus.
How much does the CDPSE exam cost?
The CDPSE exam costs $575 USD for ISACA members and $760 for non-members. There is also a one-time $50 application fee for certification once you pass. Maintenance fees and CPE reporting apply once certified.
What experience is required for CDPSE certification?
Anyone can sit the CDPSE exam, but to earn the certification you must verify three years of cumulative privacy experience across the CDPSE domains. ISACA does not require all three years in a single domain. Candidates have five years from the passing date to apply for certification.
How is CDPSE different from CIPP/E or CIPT?
CIPP/E (IAPP) is a privacy-law credential focused on European data protection law. CIPT (IAPP) is a technologist credential focused on privacy by design. CDPSE is a privacy-engineering credential that combines governance, risk and compliance, lifecycle management, and substantial privacy-engineering content (39%) — making it especially relevant for engineers, architects, and security teams implementing privacy controls.
Is the CDPSE exam open or closed book?
The CDPSE exam is closed book and computer-based. Candidates take it through PSI testing centers or remote proctoring with strict ID verification, monitoring, and no outside reference materials. Scratch material handling is governed by the ISACA Candidate Guide.
How should I study for the CDPSE exam?
Study from the current ISACA CDPSE Exam Content Outline (updated June 2, 2025), prioritize Privacy Engineering because it is 39% of the exam, and read the NIST Privacy Framework and ISO/IEC 27701 alongside GDPR Articles 5-34. Practice scenario questions on PIA/DPIA, PETs, de-identification, DSAR workflows, and breach response. Reinforce with timed practice exams to build pacing for the 120-question, 3.5-hour format.