• Format: 120 multiple-choice questions

• Scoring: Scaled score between 200 and 800; a minimum of 450 is required to pass

• Language: English

• Delivery: Computer-based testing at authorised PSI centres or Online

The CDPSE exam assesses knowledge across four domains:

1. Privacy Governance – 20%

2. Privacy Risk Management and Compliance – 18%

3. Data Life Cycle Management – 23%

4. Privacy Engineering – 39%

To earn the CDPSE certification, candidates must:

• Pass the CDPSE Exam

• Work Experience: Have a minimum of three years of professional work experience in at least two of the four CDPSE domains within the past ten years.

• Application: Submit a completed application within five years of passing the exam.

• Adhere to ISACA's Code of Professional Ethics

• Continuing Professional Education (CPE): Agree to comply with the CPE policy to maintain certification

Registration and Scheduling

• Registration: Open year-round through ISACA's website

• Scheduling: Exams can be scheduled as early as 48 hours after payment of the registration fee

• Eligibility Period: Candidates have 12 months from the date of registration to take the exam

Candidates who do not pass the exam on their first attempt are allowed up to three retakes within a 12-month period. 

The waiting periods between attempts are as follows:

• Second Attempt: 30 days after the first attempt

• Third Attempt: 90 days after the second attempt

• Fourth Attempt: 90 days after the third attempt