Skip to content
AIAC AI ASSURANCE COUNCIL™

CAIC-DP-F · Fundamentals grade · Compliance

Certified AI Compliance Fundamentals — Data Protection

Data protection applied to AI: automated decision-making under GDPR Article 22, data protection impact assessments, and privacy by design in systems that learn from personal data.

2 hours examination · remote, proctored · valid 2 years

US$695

First membership year included

Enrol now

§ 1 — Intended candidates

Who this certification is for

The competency standard at the intersection of data-protection law and AI systems — the questions a privacy or compliance professional faces the moment personal data meets a model.

Privacy officers & DPOs
Compliance & legal teams
Owners of AI processing personal data
Prerequisites
No formal prerequisites. Candidates are expected to have professional experience in a privacy, legal, compliance, or risk function.

This is the Fundamentals grade of the AI Compliance — Data Protection family — Professional and Fellow follow it.

§ 2 — Examination domains

What the examination covers

The examination is mapped to the GDPR and general data-protection law as they apply to AI systems. Weightings are indicative until each syllabus is published.

  1. 01

    Data-protection foundations applied to AI25%

    Lawful basis, minimisation, and purpose limitation applied to systems that learn from personal data.

  2. 02

    Automated decision-making and profiling20%

    GDPR Article 22 and its limits: when a decision is solely automated, and what meaningful human involvement requires.

  3. 03

    Impact assessments for AI20%

    When an AI deployment triggers a DPIA, scoping one that actually examines the model, and acting on what it finds.

  4. 04

    Privacy by design and default20%

    Privacy by design and default across the model lifecycle, from training data through deployment.

  5. 05

    Rights, transparency, and transfers15%

    Data-subject rights, transparency obligations, and cross-border transfer considerations.

Curriculum mapping indicates alignment of learning content with published frameworks. It does not constitute endorsement by, or certification under, any standards organisation or regulator.

§ 3 — Preparation

What preparation is anchored to

GDPR — the text itself
Recognised regulatory guidance
Local regimes — e.g. the Singapore PDPA

Candidates prepare independently against the published materials.

The Council certifies individuals — it sells no preparation of any kind, and how a candidate prepared is never visible to an assessor. How impartiality is protected.

§ 4 — Assessment

How candidates are assessed

Examination centred on a supplied AI deployment processing personal data, requiring the applicable data-protection analysis and its consequences for the design.

Every script is marked twice — an AI assessor first and provisional, an independent human assessor second and final. The credential carries a unique identifier any employer can check on the public register.

§ 5 — Questions

Questions about this certification

What does the examination cost?

US$695, with the first year of membership included. Nothing is payable until you register for a sitting.

When can I sit the examination?

Registration is open now through the candidate portal; examination sittings run from the October 2026 window and are scheduled at booking.

Scheme-wide questions are answered on the FAQ and in the candidate handbook.

§ 6 — Further reading

Background reading

§ 7 — Register

Register for this examination

Create a candidate account and register now; sittings are scheduled from the October 2026 examination window and the examination fee is US$695, with the first year of membership included. Members pay a reduced rate on every examination.

Register — candidate portal

The Council is pursuing ISO/IEC 17024 accreditation; no accreditation is claimed until it is held. Accreditation status.