Finally passed GDPR certification after two attempts — here's what actually worked

So I just got my results back and I finally passed. Second attempt, honestly a little embarrassing to admit, but I wanted to share what made the difference because I see a lot of people asking about this and most of the advice out there is pretty generic.

First time I went in thinking my work experience (3 years as a data protection officer at a mid-size SaaS company) would carry me. It didn't. The exam tests very specific legal interpretations — Article 6 lawful bases, data subject rights timelines, the DPA appointment thresholds — stuff where being slightly off still means wrong. What actually helped the second time was doing a proper GDPR practice test every day for two weeks, not just reading. I used a structured study guide that mapped each question back to the specific regulation article. That's the thing nobody tells you: you need to know WHERE in the regulation something lives, not just that it exists.

Happy to share my full prep timeline and the specific topic areas that tripped me up. Also if anyone has questions about the processor vs. controller distinction — that showed up way more than I expected. What are others using to prep?