BCS GDPR Update: Foundation Certificate in Data Protection Practice Exam

The BCS GDPR Update: Foundation Certificate in Data Protection is a professional certification that helps people understand the key rules of the General Data Protection Regulation (GDPR). It proves that someone knows the basics of how personal data should be handled, stored, and protected according to the law. CRE certification is designed for anyone who works with data and wants to make sure they follow the right practices to keep information safe and compliant.

Offered by BCS, The Chartered Institute for IT, CRE certification is recognized by employers as a mark of GDPR knowledge. It benefits professionals in roles such as HR, marketing, IT, compliance, and customer services. By earning this certificate, individuals show they can support organizations in meeting legal requirements and avoiding data breaches. It also helps businesses build trust with customers by showing commitment to protecting personal information.

 

Who should take the Exam?

This exam is ideal for:

• Data Protection Officers 
• IT Managers 
• HR Managers 
• Compliance Officers 
• Legal Advisors 
• Customer Support Leads 
• Marketing Managers 
• Project Managers 

 

Skills Required

• Basic understanding of data handling
• Attention to detail
• Analytical thinking
• Ethical decision-making
• Communication skills
• Understanding organizational policies
• Problem-solving mindset

 

Knowledge Gained

• Understanding GDPR principles and terminology
• Knowing individual data rights
• Learning how to handle and protect personal data
• Awareness of data breach procedures
• Understanding responsibilities of data controllers and processors
• Knowing legal consequences of data misuse
• Building privacy-focused workplace practices

Course Outline

The BCS GDPR Update: Foundation Certificate in Data Protection Exam covers the following topics - 

Domain 1. General Data Protection Regulation (GDPR) background 7%

• Define the wider scope and jurisdiction of the GDPR,  its relationship to the UK Data Protection Act 2018. 
• Overlapping new or emerging legislation. 

Domain 2. GDPR definitions and terminology 7%

• Distinguish the important definitions in the GDPR where the terminology is new or differs from previous data protection legislation.

Domain 3. The data protection principles 7%

• Identify how the enhancements to the data protection principles established in the GDPR (Article 5) differ from the previous UK Data Protection Act 1998 principles, i.e. the 6 principles detailed with Article 5(1) and the accountability requirement from Article 5(2).  
• Data processing.
• Data controllers and processors being accountable for compliance with data processing principles. 

Domain 4. Special categories of personal data 7%

• Recognize that the GDPR introduces new special categories of personal data and separates the processing of personal data relating to criminal convictions and alleged criminal offenses.

Domain 5. The lawfulness of processing 22%

• Identify the lawful conditions (grounds) that must be satisfied in order to legitimize the processing of personal data.

Domain 6. Data Subject Rights 22%

• Recall and identify data subject rights granted under the GDPR, how they relate to the seven fundamental principles, and how they are applied in practice. 

Domain 7. Data Controller and Data Processor obligations 14%

• Identify the obligations that are placed upon data controllers and processors under the GDPR.

Domain 8. Transfers of personal data 7%

• General principles for transfers 

Domain 9. Powers of the Supervisory Authorities 7%

• Define the Supervisory Authority’s powers