CIPP/A study guide
CIPP/A · Work through your exam, one topic at a time.
CIPP/A - Certified Information Privacy Professional/Asia - is a credential from the IAPP that demonstrates data protection proficiency in Asian economies. It is aimed at privacy practitioners, legal and compliance staff, auditors, consultants and vendors who advise organisations operating across Asia or globally, and who must reason about several national regimes rather than a single one. The CIPP/A study guide has 6 sections and about 1,687 words.
01Fundamentals of Asian Privacy and Data Protection Regimes
Asia has no single privacy law. This domain tests whether you can classify a jurisdiction's model, name its regulator, and identify which transfer rule governs an export.
282 words, about 1 min02APEC Privacy Framework and Cross-Border Data Transfer Mechanisms
The APEC Privacy Framework (2004, revised 2015) is voluntary, non-binding guidance. It sets nine principles: Preventing Harm, Notice, Collection Limitation, Uses of Personal Information, Choice, Integrity of Personal Information, Security Safeguards, Access and Correction, and Accountability.
230 words, about 1 min03Singapore: PDPA and Related Regulation
The PDPA 2012, substantially amended in 2020, applies to organizations processing personal data in Singapore. It excludes individuals acting in a personal capacity and, largely, public agencies.
301 words, about 2 min04Hong Kong: PDPO and Related Guidance
The Personal Data (Privacy) Ordinance (Cap. 486) is built on six Data Protection Principles.
280 words, about 1 min05India: IT Act and Related Rules
India is transitioning from a sectoral IT Act framework to an omnibus data protection statute. Section 43A provides compensation for failure to implement reasonable security practices for sensitive personal data or information (SPDI).
306 words, about 2 min06Japan: Act on the Protection of Personal Information
The APPI (2003, with major 2017 and 2022 amendments) is enforced by the Personal Information Protection Commission (PPC). Personal information versus personal data (held in a database) versus retained personal data.
288 words, about 1 min