Explainers
What Is Third-Party Risk Management (TPRM)? A Practical Guide
Solomon Amos · 2 Nov 2026 · 10 min read
CBT Nuggets
GDPR evidence
For 20+ years, IT pros and teams have trusted CBT Nuggets for online IT training for certifications and IT
No public evidenceCBT Nuggets and GDPR
CertReports found no public GDPR evidence for CBT Nuggets as of unknown date. This does not mean the vendor is non-compliant. It means CertReports found no public evidence at the last check.
Evidence
VerifiedActive: UK Extension Certification, EU-US Certification, SW-US Certification
as of 2 Nov 2026 · confidence 100%- Kind
- Listing
- Issued or listed
- 8 May 2018
- Expires or valid through
- 24 Sep 2027
- Scope
- CBT Nuggets provides commercial off the shelf subscription access to our online training resources, and we collect, process and store end user information in a uniform manner for all customers. The types and purposes of personal data collected are detailed in the INFORMATION WE COLLECT Section of the Privacy Policy, and specifically, the categories of personal data collected include: Name (First, Last) Email Address (Business or Personal) IP Address Billing Address (Business or Personal) Phone Number (As Applicable) We collect and process personal data as an integral part of the delivery of our Services, as detailed in the INFORMATION WE DISCLOSE Section of the Privacy Policy. Our contractors, service providers, processors and other businesses that we use to support our business and to fulfill the Services include the following categories: Website Hosting Data storage centers, database solutions and internal development tools. Administration Services Billing, accounting, payment processing, customer relationship management (CRM), data enrichment services, customer account maintenance, internal and external communication tools. Service Delivery Practice exams, virtual labs, certifications of completion, video encoding, content delivery, and customer service tools. Mailing List Email marketing as opted into by customers and other necessary transactional communications. Website Interaction Technologies Cookies, web beacons, tracking pixels and similar website interaction technologies Contractor Services Software engineering, video and written content creation and design, and other sales and marketing services.
| Source | Captured | Quote | Links |
|---|---|---|---|
Data Privacy Framework list Official registry · HTTP 200 | 2 Nov 2026 | CBT Nuggets, LLC: Active: UK Extension Certification, EU-US Certification, SW-US Certification | Live pagesha256 9a77070701 |
Data Privacy Framework list Official registry · HTTP 200 | 19 Oct 2026 | CBT Nuggets, LLC: Inactive | Live pagesha256 2b1653d7b9 |
Data Privacy Framework list Official registry · HTTP 200 | 17 Sep 2026 | CBT Nuggets, LLC: Active: UK Extension Certification, EU-US Certification, SW-US Certification | Live pagesha256 2d1eadef71 |
What GDPR means, and what it does not
"GDPR compliant" is a claim, not a certification. The verifiable facts are a public DPA, SCC usage, an EU representative, data residency options and a Data Privacy Framework listing.
Read the GDPR guide and browse all vendors with evidenceQuestions buyers ask
Is CBT Nuggets GDPR compliant?
There is no GDPR certification in general use. The verifiable facts are a public data processing agreement, standard contractual clauses, an EU representative and a Data Privacy Framework listing. See the legal artefacts and the DPF row on this page, each with its capture date.
How does CertReports verify this?
Every state carries a capture date, a source and a snapshot link. Registry rows come from the official registry data; vendor statements come from the vendor’s own page or trust centre; nothing is inferred. Vendors can dispute any row and corrections ship within two business days.
Change history
- 18 Sep 2026First indexed by CertReports1 evidence row across 1 framework entered the index.
Alternatives with GDPR evidence
Similar vendors (shared product tags or the Education category) whose GDPR row is verified or vendor-stated, ranked by similarity.
Docebo
Education
Docebo’s AI-powered LMS helps world-class organizations train employees, partners, and customers on a unified
KnowBe4
Education
Everything you need to reduce human risk and secure your agents all in one platform: Security Awareness Training, Email Security, Agent
Dozuki
Education
Empower frontline workers with Dozuki Connected Worker Platform, the best in standard work instruction and training
Understand GDPR evidence
All articlesHow-to
Vendor Security Questionnaire Questions Answered by Public Evidence
Solomon Amos · 26 Sep 2026 · 8 min read