Choose Your Reading Style
A professional-level summary covering key definitions, frameworks, and exam-relevant points.
GDPR Governance Implications
GDPR imposes specific governance requirements that align directly with data management best practices:
| GDPR Requirement | Data Governance Capability Required |
|---|---|
| Records of processing activities (Article 30) | Data inventory / data catalog |
| Data subject rights (Articles 15-22) | Data lineage, data discovery, deletion processes |
| Data Protection Impact Assessment (DPIA) | Data classification, risk assessment processes |
| 72-hour breach notification (Article 33) | Data security monitoring, incident response |
| Data minimisation (Article 5) | Data lifecycle management, retention policies |
| Accountability (Article 5(2)) | Governance documentation, audit trails, DPO role |
The Data Protection Officer (DPO)
GDPR requires certain organisations to appoint a Data Protection Officer (DPO) — an independent expert responsible for monitoring compliance with GDPR. The DPO is distinct from the CDO (Chief Data Officer): the CDO leads the data strategy and governance programme; the DPO monitors privacy compliance and advises on GDPR obligations. In practice, the DPO and CDO must work closely together.
CDMP Exam Relevance
GDPR and data privacy regulations appear in the Data Security and Data Governance knowledge areas. Key exam topics: the seven GDPR principles, data subject rights, the DPO role, and the governance capabilities required for GDPR compliance. The CDMP exam tests whether candidates understand that GDPR compliance is a governance challenge, not just a legal or IT challenge.