Blueprint Coverage - Domains IV–V

Blueprint Check, Domain coverage map (IV–V) & gap analysis

The cross-check for Domains IV (Scope & Accountability) and V (Compliance), plus the short list of items the official training reinforced on top of this guide (NIS2, the EU AI Act, dark patterns, Opinion 22/2024, the Article 27 representative and the EDPS).

Domain IV - Scope & Accountability (8–18 questions)
Competency (BoK)Training moduleCovered in this guide
IV.A Territorial & material scope (establishment vs non-establishment, scope of processing & exemptions)Module 4Book Ch 5 topics + Module 4 training topics
IV.B Accountability (controllers/joint/processors, DP by design & default, documentation, DPIAs, mandatory DPO, auditing)Modules 3, 10Book Ch 11 topics + Module 10 training topics
IV.C Supervision & enforcement structure (EDPB & EDPS powers, supervisory authorities, lead SA)Module 11Book Ch 13 topics + Module 11 training topics
IV.D Consequences for violations (procedures & fines, class actions, compensation)Module 11Book Ch 13 topics + Module 11 training topics
Domain V - Compliance with EU Data Protection Law (8–16 questions)
Competency (BoK)Training moduleCovered in this guide
V.A Employment (legal basis, personnel records, monitoring & DLP, BYOD, works councils, whistleblowing)Module 8Book Ch 14 topics + Module 8 training topics
V.B Surveillance (public-authority surveillance, interception, CCTV, geolocation, biometrics/facial recognition)Module 8Book Ch 15 topics + Module 8 training topics
V.C Direct marketing (processing for marketing, online behavioural targeting)Module 8Book Ch 16 topics + Module 8 training topics
V.D Internet technology (cloud, web cookies, social media & dark patterns, search-engine marketing, AI & machine learning)Module 8Book Ch 17 topics + Module 8 training topics (Ch 18 outsourcing supports IV.B & V)
What the official training reinforced

This guide maps its lessons to the current published exam outline. Current additions include NIS2 (essential and important entities, the 17 October 2024 transposition deadline and EUVD/ENISA), the EU AI Act risk framework, dark-pattern guidance, EDPB Opinion 22/2024 on sub-processors, the Article 27 EU-representative duty and the role of the EDPS.

Overall verdict

All five domains and every competency in the Exam Blueprint are covered - by this guide chapters and the official-training topics together, with the EDPB guidelines pulled out for focused revision. No blueprint gaps remain.

Key terms - quick answers

What is “EDPS”?
European Data Protection Supervisor - supervises the EU institutions' own compliance; sits on the EDPB with limited voting rights.
What is “Article 27 representative”?
An EU-based representative that a non-EU controller/processor caught by Article 3(2) must appoint as a contact point for supervisory authorities and data subjects.

Sources and study method

This independent lesson uses active recall, spaced retrieval and scenario practice. Read the full study method.