OpenExamsFREE PRACTICE — ANY EXAM

BCS Foundation Certificate in Data Protection — Requirements & Free Practice

US · License preparation

100 free questions · Answer explanations · No signup required

Loading selected examination banks…

Choose what to practice

Start with an exam below. Your examination requirements depend on your application pathway. View licensing requirements

Licenses, application pathways and examination requirements

Each license and applicant pathway has its own requirements and exemptions. Choosing practice questions does not determine your eligibility.

BCS Foundation Certificate in Data Protection

Foundation-level professional certification covering the key elements and practical application of UK data protection law, UK GDPR and EU GDPR.

Licensing authority: BCS, The Chartered Institute for IT

Initial by examination
BCS Foundation Certificate in Data Protection
Availability
No applicable official v3.9 retirement date was found. Appointment channels do not establish a guaranteed seat in the requested 2026-11-25 to 2027-01-31 window.
Award
Pass the Foundation examination; successful candidates access the BCS e-certificate through the BCS candidate portal.
Booking
Self-study candidates may book directly with BCS by telephone. The owner also links Pearson VUE; that channel requires creation/use of a Pearson account to schedule an exam, an accurate individual email address, and test-centre or available OnVUE arrangements.
Eligibility
No mandatory entry requirements; a good standard of written English and maths is needed. Centres must ensure learners have the potential and opportunity to succeed. Background data-protection/IT knowledge is advantageous, not an additional prerequisite award.
Language
Only the English v3.9 examination documented by the English syllabus and linked specimen is included.
Preparation
Accredited training or self-study; training is recommended rather than mandatory.
Sitting
Registered date and time; supervised and closed book; no materials in the examination room. Syllabus delivery is digital or paper based.

BCS Foundation Certificate in Data Protection

Provider
BCS; Pearson VUE
Format
Supervised, closed-book multiple-choice examination; the syllabus permits digital or paper delivery. This record covers the English v3.9 examination.
Exam questions
Total questions: 40.
Time limit
60 minutes; adjustments/additional time may be requested under BCS policy.
Passing score
26/40 (65%)
Examination outline
  • An introduction to the history of data protection in the UK (6%)
    • Personal data rights in the UK and EU
    • Territorial scope and jurisdiction of the UK GDPR
  • Principles of data protection and applicable terminology (15%)
    • Key terminology and definitions
    • Data protection principles
  • Lawful bases for processing personal data (10%)
    • Lawful bases under Article 6 UK GDPR
    • Conditions for processing special category data
  • Accountability principle (21.5%)
    • Accountability obligations and controller responsibility
    • Purpose and legal requirement of a DPIA
    • DPIA process and prior consultation
    • Records of processing activity
    • Privacy notices
    • Data protection by design and by default
    • Information security measures
    • Designation, position and tasks of the DPO
    • DPO compliance monitoring
  • Obligations of controllers, joint controllers and data processors (7.5%)
    • Controller and processor obligations
  • International data transfers under EU and UK GDPR (7.5%)
    • UK GDPR data transfers and transfers to and from the EU
  • Data subject rights (12.5%)
    • Key rights granted to individuals
    • Other information requests: FOI and EIR
    • Impact of AI on data rights
  • Independent supervisory authorities (ISAs) and the Information Commissioner’s Office (ICO) (7.5%)
    • Role of ISAs under EU GDPR
    • Role of the ICO and transition to the Information Commission
  • Breaches, enforcement and liability (7.5%)
    • Personal data breach reporting
    • ICO enforcement powers
    • Liabilities
  • Privacy and Electronic Communications (EC Directive) Regulations (PECR) 2003 and subsequent amendments (5%)
    • Relationship between UK GDPR, DPA 2018 and PECR in marketing
Examination sources