CIPP/C
More study resources
Cheat sheet
Keep the key ideas within reach.
ExploreKey terms
Get comfortable with the vocabulary.
ExploreStudy plan
Give each week a clear focus.
ExploreCommon mistakes
Understand the traps and how to avoid them.
ExploreCase studies
Put your knowledge to work in context.
ExploreExam-day guide
Prepare for the day ahead.
ExploreAbout this exam
The Certified Information Privacy Professional/Canada (CIPP/C) is a professional credential in the CIPP family of privacy certifications. IAPP describes itself as "a policy neutral, not-for-profit association founded in 2000 with a mission to define, promote and improve the professions of privacy, AI governance and digital responsibility globally." The CIPP/C designation is aimed at professionals whose work touches Canadian privacy obligations: privacy officers and counsel, compliance and risk staff, HR and marketing teams handling personal information, and consultants or vendors serving Canadian organizations. Candidates typically use it to demonstrate working knowledge of how privacy law and regulation operate across Canadian jurisdictions and how to build and run a privacy program against those requirements. Preparation generally starts with the exam blueprint, then combines structured study of Canadian privacy law and policy, regulation and enforcement, and program development and operations with practice on scenario-based questions that test application rather than recall. This page is independent study material and is not affiliated with, endorsed by, or sponsored by the IAPP. It is not an official exam guide. Verify all exam logistics - format, timing, fees, retake rules, and current blueprint - directly with the certifying body before you schedule.
What you'll study
About CIPP/C preparation
Is this page an official CIPP/C resource?
No. This is independent study material and we claim no affiliation with, endorsement by, or sponsorship from the IAPP. Use it alongside the certifying body's own materials and confirm exam details at the source before you book or pay for anything.
What does the CIPP/C exam cover?
The credential focuses on Canadian privacy. Our study plan is organized around four areas: Canadian privacy law and policy; Canadian privacy regulation and enforcement; privacy program development and management; and privacy program operations. Treat that as a study framework, not a verified official blueprint, and check the current outline with the certifying body.
How many questions are on the exam and how long do I get?
We cannot state this. The certifying body's program page was unavailable when we last checked, so item count, time limit, and passing score are unconfirmed here. Confirm them on the official certification pages or in the certification FAQ before scheduling, and rehearse pacing against whatever limit you are given.
How hard is it, and where do candidates lose points?
The common failure mode is memorizing statutes in isolation. Canadian privacy questions tend to be scenario-based, so candidates who cannot decide which regime applies to a given organization, activity, or data type struggle. Practice choosing the governing law first, then the obligation, then the practical control.
What study order do you recommend?
Start with the legal and policy layer so later material has context, then regulation and enforcement, then program development, then operations. Operations questions assume you already know the underlying obligations. Build a one-page map of which law covers which organization and activity, and revisit it before every practice set.
Do I need Canadian legal training to pass?
No. The credential is taken by privacy, compliance, HR, marketing, IT, and consulting professionals, not only lawyers. You do need comfort reading obligations precisely and applying them to facts. If you lack a legal background, spend extra time on how the different Canadian regimes divide jurisdiction and what triggers each one.
What if I fail - can I retake it?
Retake rules, waiting periods, and any fees are set by the certifying body and were not verifiable from the source we could access. Do not rely on secondhand claims about retake windows. Check the official certification FAQ before your first attempt, since knowing the retake cost affects how you plan your study timeline.
How should I prepare in the final two weeks?
Shift from reading to applying. Work scenario questions under timed conditions, write out why each wrong option fails, and drill the areas where you hesitate. Review your error log rather than rereading notes. Confirm your appointment logistics and identification requirements early so exam-day administration does not consume study time.