CIPP/E study guide
CIPP/E · Work through your exam, one topic at a time.
The CIPP/E (Certified Information Privacy Professional/Europe) is an ANAB-accredited designation that, in the IAPP's own words, proves you have an understanding of pan-European and national data protection laws, key privacy terminology and practical concepts concerning the protection of personal data and trans-border data flows. It is built for practitioners whose work touches European privacy - in-house and outside counsel, compliance and information-security staff, consultants, and privacy programme owners - who need a principles-based framework for European data protection rather than a single country's statute. The CIPP/E study guide has 4 sections and about 1,401 words.
01Introduction to European Data Protection
Start with the architecture. The Council of Europe's Convention 108 (1981, modernised as 108+) is the first binding international data protection treaty; the OECD Guidelines (1980) are soft law.
373 words, about 2 min02European Data Protection Law and Regulation
Learn the structure in order. Article 4 definitions: personal data (any information relating to an identified or identifiable natural person), processing, controller (determines purposes and means), processor, pseudonymisation.
356 words, about 2 min03Compliance with European Data Protection Law and Regulation
Compliance questions test whether you can match a fact pattern to a mechanism and a deadline. Core mechanisms: records of processing under Article 30 (written or electronic, containing the listed elements); data protection impact assessment under Article 35 where processing is likely to result in high risk, with prior consultation under Article 36 if residual risk stays high; data protection by design and by default under Article 25; written processor contracts under Article 28 with its mandatory terms; joint controller arrangements under Article 26; demonstrable consent under Article 7; and transparency notices under Articles 13–14.
346 words, about 2 min04International Data Transfers
Transfers are a separate question from applicability. First check Article 3 - is the exporter subject to the GDPR?
326 words, about 2 min