CIPP/E
CIPP/E: Certified Information Privacy Professional/Europe
More study resources
Cheat sheet
Keep the key ideas within reach.
ExploreKey terms
Get comfortable with the vocabulary.
ExploreStudy plan
Give each week a clear focus.
ExploreCommon mistakes
Understand the traps and how to avoid them.
ExploreCase studies
Put your knowledge to work in context.
ExploreExam-day guide
Prepare for the day ahead.
ExploreAbout this exam
The CIPP/E (Certified Information Privacy Professional/Europe) is an ANAB-accredited designation that, in the IAPP's own words, proves you have an understanding of pan-European and national data protection laws, key privacy terminology and practical concepts concerning the protection of personal data and trans-border data flows. It is built for practitioners whose work touches European privacy - in-house and outside counsel, compliance and information-security staff, consultants, and privacy programme owners - who need a principles-based framework for European data protection rather than a single country's statute.
The exam is scoped by the CIPP/E Body of Knowledge and Exam Blueprint: the Body of Knowledge lists the concepts and topics you are expected to know, and the Blueprint shows how many questions come from each topic area. Both are published in French and German as well as English, and the French and German exam versions were produced by professional translation firms under ISO-certified quality assurance, with no machine translation.
To prepare, start with the free Body of Knowledge and Exam Blueprint, then the downloadable study guide, which covers the exam format and offers sample questions. The IAPP also strongly encourages candidates to read the certification candidate handbook for testing policies and procedures before sitting the exam, and offers European Data Protection training, which it describes as the principal training for CIPP/E certification.
What you'll study
About CIPP/E preparation
What does the CIPP/E actually certify?
The IAPP describes it as an ANAB-accredited designation proving an understanding of pan-European and national data protection laws, key privacy terminology, and practical concepts concerning the protection of personal data and trans-border data flows. It signals a principles-based European privacy knowledge base rather than legal advice for one jurisdiction.
How many questions are on the exam and how long do I get?
The certification page does not state a question count or time limit, so treat any figure you hear second-hand with caution. The CIPP/E Body of Knowledge and Exam Blueprint shows how many questions come from each topic area, and the study guide covers the exam format - check both against the current published version.
What does the exam cost and how do I register?
The certification page links to a 'Buy the exam' option but does not publish a fee, currency, or regional pricing. Get the current price from the IAPP store at the point of purchase rather than relying on older figures, since certification pricing is revised periodically.
Is the exam available in languages other than English?
Yes. French and German versions exist, translated from the English exam by professional translation firms under ISO-certified quality assurance processes, with no machine translation used. The Body of Knowledge and Exam Blueprint are also available in French and German, so you can prepare in the same language you test in.
What is the pass mark, and what happens if I fail?
Neither the passing score nor the retake policy is stated on the certification page. Both sit in the certification candidate handbook and the testing policies referenced there, so read those before booking. Do not budget on the assumption of a free or immediate retake.
Do I have to buy training to sit the exam?
The page does not state training as a prerequisite. It does describe European Data Protection training as the principal training for CIPP/E certification, delivering comprehensive knowledge of the GDPR, alongside textbooks, flexible training options and self-assessment tests. Many candidates self-study from the Body of Knowledge and study guide instead.
In what order should I study?
Work from the scope documents outward: Body of Knowledge first to see the concept list, Exam Blueprint next to see how many questions each topic area attracts and weight your time accordingly, then the study guide's sample questions to test retrieval. Add training or a textbook only for areas the Blueprint shows are heavily tested.
What are the most common ways candidates underprepare?
Three recur: treating it as pure GDPR recitation and ignoring national law variation, skimming trans-border data flow concepts because they feel technical, and reading without practising questions. The Blueprint shows questions are spread across topic areas, so a strong performance in one area will not carry a weak one.
How long is the certification valid, and is there recertification?
The certification page does not state a validity period or recertification requirement. Confirm current maintenance rules through the IAPP certification pages and candidate handbook before you plan your study and budget, and diarise the renewal deadline as soon as you are certified.
What should I read before test day?
The certification candidate handbook, which the IAPP strongly encourages all potential test takers to read before testing for details on testing policies and procedures. Do this before you book a slot, not the night before, because scheduling, ID and rescheduling rules can affect your plans.