All exams ← Home
Home · Certified GDPR Practitioner (IBITGQ)

Certified GDPR Practitioner (IBITGQ)

This qualification is for professionals needing to implement and manage GDPR compliance within their organisation. It validates the knowledge and skills required to act as a Data Protection Officer (DPO) and build a privacy management framework.

Written against the published specification.

Pass mark 26/40 180 minutes Real test fee approx £450 IBITGQ (International Board for IT Governance Qualifications) How many can I get wrong?
About this practice. Revision Robin is built and maintained by Bloor Engineering Ltd, a UK-registered company. Our Certified GDPR Practitioner (IBITGQ) questions are written and reviewed in-house to match the current syllabus, each with a plain-English worked explanation. They are original practice material, not the official exam questions and not affiliated with or endorsed by IBITGQ (International Board for IT Governance Qualifications). Always confirm current test rules, fees and content with the official provider. See our Terms and Privacy.
Weak on a topic? Drill just that one till it clicks, then move on.
Free practice questions
Try 3 real Certified GDPR Practitioner (IBITGQ) questions
Have a go, then reveal the worked explanation. A taster from a bank of 203 original questions. Unlock for unlimited drills and full timed mocks.
Q1. Under which of the following circumstances is the appointment of a Data Protection Officer (DPO) mandatory according to Article 37 of the UK GDPR?
  • A.  The organisation has more than 250 employees.
  • B.  The organisation is a public authority or body.
  • C.  The organisation processes personal data for marketing purposes.
  • D.  The organisation has an annual turnover exceeding £20 million.
Show answer & explanation
✓ Answer: B. The organisation is a public authority or body.
Article 37 mandates a DPO for all public authorities and bodies, regardless of the scale or type of their data processing activities.
Q2. The 'accountability' principle, as defined in Article 5(2) of the UK GDPR, fundamentally requires a data controller to:
  • A.  Appoint a Data Protection Officer for any and all processing activities.
  • B.  Be responsible for, and be able to demonstrate, compliance with the data protection principles.
  • C.  Only process data that has been fully anonymised before storage.
  • D.  Gain explicit consent from data subjects for every processing activity undertaken.
Show answer & explanation
✓ Answer: B. Be responsible for, and be able to demonstrate, compliance with the data protection principles.
Accountability means the controller is not only responsible for complying with the GDPR principles but must also have measures and records in place to prove that compliance.
Q3. A former employee requests that their previous employer erase all personal data held about them. The employer retains payroll records for 6 years. Which is the most valid reason for the employer to refuse complete erasure?
  • A.  The request is considered manifestly unfounded.
  • B.  The data is needed to defend future legal claims.
  • C.  The processing is necessary for compliance with a legal obligation.
  • D.  The data was originally processed based on legitimate interests.
Show answer & explanation
✓ Answer: C. The processing is necessary for compliance with a legal obligation.
Article 17(3)(b) provides an exemption to the right to erasure where processing is necessary for compliance with a legal obligation, such as tax and employment laws requiring retention of payroll data.
Exam mode
Full mock exam
40 random questions, real timing, marked against the official pass mark. Different every time.
Create a free account for a full mock
No card needed. A free account unlocks unlimited full timed mocks and drills on this exam.
Practice material only. This is revision practice, not official training, assessment or certification, and not a substitute for the required course or supervised experience. Always confirm the current requirements with the official awarding body or test provider before relying on it.
Try it free
Topic drills
Ten quick questions on one topic, marked instantly with explanations.
1 free drill left, then a free account unlocks unlimited drills on this exam.
The Role of the Data Protection Officer (DPO) · 29
The Principles of the GDPR and Lawful Basis for Processing · 28
The Rights of Data Subjects · 30
Data Protection Impact Assessments (DPIAs) · 30
Data Breach Reporting and Incident Management · 28
International Data Transfers · 18
Demonstrating Compliance and the Accountability Principle · 20
Powers of Supervisory Authorities and GDPR Fines · 20

The real Certified GDPR Practitioner (IBITGQ): format

How many questions are in the Certified GDPR Practitioner (IBITGQ)?

The real Certified GDPR Practitioner (IBITGQ) has 40 questions and lasts 90 minutes. Our mock uses 40 questions in 180 minutes.

What is the Certified GDPR Practitioner (IBITGQ) pass mark?

Real exam pass mark: 65%. Our mock marks you at 26 out of 40, the threshold we mark against.

What it costs, and what a resit costs

How much does the Certified GDPR Practitioner (IBITGQ) cost?

Real exam fee: £200.00 (ex. VAT)

How hard is it

What is the Certified GDPR Practitioner (IBITGQ) pass rate?

Real exam first-time pass rate: 83% (general IBITGQ exams)

Why people fail it

Why do people fail the Certified GDPR Practitioner (IBITGQ)?

Figures for the real exam from vertexaisearch.cloud.google.com, checked October 2026. Fees and rules change, so confirm with the test provider before you book.
Certified GDPR Practitioner (IBITGQ): common questions
Frequently asked
How long do you get?
The test is timed at 180 minutes. Our full mock runs on the same clock so you can practise your pacing.
Are these the real exam questions?
No. Our questions are original and written to match the current syllabus, so they give realistic practice without copying the official paper. Every answer comes with a plain-English explanation. Always confirm current rules and content with IBITGQ (International Board for IT Governance Qualifications).