GDPR Customer FAQ

What is GDPR?

In 2012, the European Commission began a process to reform Europe's existing data protection laws by proposing a new data protection regulation to replace the current Data Protection Directive.  GDPR was agreed and adopted in 2016 and will take effect on 25 May 2018. 

Further Information about your Rights and Relevant Supervisory Authority

For more information on GDPR please visit https://eur-lex.europa.eu/legal-content/EN/TXT/?toc=OJ%3AL%3A2016%3A119%3ATOC&uri=uriserv%3AOJ.L_.2016.119.01.0001.01.ENG.

Prodigy Learning Limited is based in the Republic of Ireland and, as such, will be subject to supervision by the Data Protection Commissioner (www.dataprotection.ie). 

What is Prodigy Learning doing about GDPR?

We take our responsibilities under GDPR seriously.  Over the past year we’ve embarked on a programme to identify the measures we need to implement to be compliant with GDPR and to ensure implementation in time for 25 May 2018.  This includes:

• Completing a comprehensive GDPR audit and data map, identifying priorities for compliance with GDPR by 25 May 2018
• Engaging all key third-party vendors to make sure we have the appropriate contractual protections in place that satisfy GDPR requirements
• Updating our privacy policy to be GDPR compliant as well as being more clear, concise and transparent about how we process personal data - the new policy effective May 25, 2018 is available below
• A company-wide data protection training module for all members of the Prodigy Learning team

What data does Prodigy Learning collect for delivery of certifications?

Prodigy Learning does not collect or control the candidate and exam data for Certiport certifications (including but not limited to ACP, ACU, ESB, IC3, MCE, MCF, MOS). The Exams are delivered directly on Certiport exam systems.  Certiport is a Pearson VUE business and Prodigy Learning is their exclusive distributor for Ireland, the UK and Australia.  The candidate data for administering the exams is collected directly by Pearson VUE. The applicable privacy policy is available at https://www.pearson.com/en-gb/legal-information/privacy-notice.html.

Who is the Data Controller / Data Processor for certifications?

For all Certiport certifications, the Data Controller is the "Program Sponsor" which is any company or organization which Certiport represents (such as Adobe, Autodesk or Microsoft), including Certiport itself, for the purposes of developing and/or selling Certiport Products and Services. The Data Processor is Certiport and the Certiport Authorised Test Centre delivering the certification exam. Contact details for Certiport are at https://certiport.pearsonvue.com/Contact-us.

What has Prodigy Learning / Certiport done to ensure GDPR compliance?

In advance of GDPR, all CATC’s were required to review and accept an updated Certiport Authorized Test Center Agreement to continue delivering Certiport exams.  Any CATCs that had not accepted this agreement by April 30, 2018, had their ability to deliver exams suspended.