CIPP/E Study Guide
Blueprint Coverage - Domains I–III

Blueprint Check · Domain coverage map (I–III)

A cross-check of the CIPP/E Exam Blueprint against this guide. Every competency in Domains I, II and III is covered by both the textbook chapters and the official training modules below. Use this to confirm nothing is missing and to find the right topics fast.

Domain I - Introduction to European Data Protection (7–13 questions)
Competency (BoK)Training moduleCovered in this guide
I.A Origins & historical context (rationale, human rights, OECD, Convention 108/108+, Brexit)Module 1Book Ch 1 topics + Module 1 training topics
I.B Roles & functions of EU institutions (CoE, ECtHR, Parliament, Commission, European Council, CJEU)Module 1Book Ch 2 topics + Module 1 training topics
I.C Legislative framework (Convention 108, Directive 95/46, ePrivacy, e-Commerce; GDPR, NIS/NIS2, AI Act)Modules 1, 4, 8, 9Book Ch 3 topics + Modules 1/4/8/9 training topics
Domain II - European Data Protection Law & Regulation (18–28 questions, the largest)
Competency (BoK)Training moduleCovered in this guide
II.A Basic GDPR concepts (personal/sensitive/special data, pseudonymous vs anonymous, controller/processor, data subject)Modules 2, 3Book Ch 4 topics + Modules 2 & 3 training topics
II.B Security of personal data (Art 32 measures, breach notification, vendor management, third-party sharing)Modules 3, 9Book Ch 10 topics + Module 9 training topics
II.C Data subjects' rights (access, rectification, erasure/RTBF, restriction, objection, consent/withdrawal, automated decisions, portability, restrictions)Modules 5, 8Book Ch 9 topics + Module 5 training topics
Domain III - European Data Processing (13–21 questions)
Competency (BoK)Training moduleCovered in this guide
III.A Principles of data processing (fairness/lawfulness, purpose limitation, proportionality, accuracy, storage limitation, integrity & confidentiality)Module 4Book Ch 6 topics + Module 4 training topics
III.B Lawful processing basis (the six Article 6 bases; special-category Article 9)Module 4Book Ch 7 topics + Module 4 training topics
III.C Information provision obligations (transparency, privacy-notice components, layered notices)Module 6Book Ch 8 topics + Module 6 training topics
III.D International transfers (rationale, adequacy, Safe Harbor/Privacy Shield/Schrems/DPF, SCCs & BCRs, codes/certification, derogations, TIAs)Module 7Book Ch 12 topics + Module 7 training topics
Verdict for Domains I–III

Fully covered. The blueprint repeatedly asks for "EDPB guidelines and opinions" - those are gathered in the Reference topics so you can revise them on their own.

Key terms - quick answers

What is “Competency”?
A cluster of connected tasks/abilities forming a broad knowledge domain in the BoK.
What is “Performance indicator”?
The discrete tasks/abilities within a competency that exam questions actually assess.