CBT Nuggets

As of 26 Oct 2026, CBT Nuggets is listed in the EU-US Data Privacy Framework registry as Active, covering the UK Extension Certification, EU-US Certification and SW-US Certification, with the entry issued on 8 May 2018 and valid through 24 Sep 2027. The registry record shows no gap or lapse before that expiration date, as of 26 Oct 2026. No public evidence found for a SOC 2 Type II report for CBT Nuggets as of 26 Oct 2026. No public evidence found for a HIPAA BAA for CBT Nuggets as of 26 Oct 2026. No public evidence found for a PCI DSS listing for CBT Nuggets as of 26 Oct 2026.

• EU-US Data Privacy Framework: listed in registry as Active (UK Extension, EU-US, SW-US), valid through 24 Sep 2027, as of 26 Oct 2026
• SOC 2 Type II: no public evidence found, as of 26 Oct 2026
• HIPAA BAA: no public evidence found, as of 26 Oct 2026

Facts only, each dated; nothing here is inferred, scored or advised. Brief generated 26 Oct 2026; it is regenerated whenever a row changes.