About the Certified Program
The Certified Information Privacy Professional (CIPP) is a globally recognized credential offered by the International Association of Privacy Professionals (IAPP). It demonstrates in-depth knowledge of privacy laws, regulations, and frameworks relevant to specific regions and jurisdictions. The CIPP helps privacy professionals develop and manage compliance programs that align with global privacy standards and legal obligations.
The CIPP credential is offered in several regional designations:
CIPP/US – United States
CIPP/E – Europe (GDPR-focused)
CIPP/C – Canada
CIPP/A – Asia
Each track validates understanding of applicable laws, regulatory bodies, and data protection practices in the respective region.
Learning Objectives
Upon successful completion of the CIPP program, candidates will be able to:
Understand Legal and Regulatory Frameworks
- Identify regional privacy laws, legal bases for data processing, and individual rights
- Interpret cross-border data transfer rules and jurisdiction-specific compliance obligations
- Recognize the roles of regulators and enforcement agencies (e.g., FTC, EDPS, ICO)
Develop and Implement Privacy Programs
- Establish governance structures for privacy program management
- Align data processing activities with legal and ethical standards
- Define responsibilities for Data Protection Officers (DPOs) and privacy professionals
Manage Data Subject Rights and Consent
- Implement mechanisms for user consent, opt-in/opt-out, and data subject access requests
- Respond to requests for data correction, deletion, and portability
- Document and manage legal bases for processing and individual preferences
Ensure Compliance in Data Lifecycle Management
- Map personal data collection, usage, retention, and disposal processes
- Establish controls to protect data integrity and confidentiality
- Conduct Privacy Impact Assessments (PIAs) and Data Protection Impact Assessments (DPIAs)
Support Breach Notification and Response
- Understand breach notification requirements and timelines
- Coordinate internal reporting and external disclosures
- Implement corrective actions and communication protocols
Exam Information
- Format: Multiple-choice questions (online, open-book)
- Total Questions: 90
- Duration: 2.5 hours
- Delivery: Computer-based (testing centers or online proctoring)
Eligibility
- No formal prerequisites
- Recommended for professionals working with personal data, legal compliance, or privacy policies
- Completion of IAPP’s official training (optional but highly recommended)
Maintaining Certification
- Complete 20 CPE hours per year
- Maintain IAPP membership and pay annual maintenance fees
- Stay current with privacy law updates and changes in regulations
Curriculum
- 5 Sections
- 10 Lessons
- 150 Minutes
- Introduction to Privacy Concepts2
- Jurisdiction-Specific Law and Regulation2
- Legal Bases and Processing Principles2
- Data Subject Rights and Transparency2
- Data Governance and Accountability2
Target audiences
- The CIPP certification is ideal for individuals involved in privacy compliance and data protection efforts, including:
- Privacy Officers and Data Protection Officers (DPOs)
- Legal and Compliance Professionals
- Information Security Officers
- Risk Managers and Consultants
- HR, IT, Marketing, and Procurement Staff handling personal data