IAPP CIPP/CN
IAPP Certified Information Privacy Professional/China (CIPP/CN)
More study resources
Cheat sheet
Keep the key ideas within reach.
ExploreKey terms
Get comfortable with the vocabulary.
ExploreStudy plan
Give each week a clear focus.
ExploreCommon mistakes
Understand the traps and how to avoid them.
ExploreCase studies
Put your knowledge to work in context.
ExploreExam-day guide
Prepare for the day ahead.
ExploreAbout this exam
The CIPP/CN is the China-focused credential in the IAPP's Certified Information Privacy Professional family, aimed at practitioners whose work touches Chinese data protection law: in-house and outside counsel, privacy and compliance managers, security and data governance staff, consultants, and vendors serving Chinese or multinational clients. The IAPP describes itself as a policy neutral, not-for-profit association founded in 2000 with a mission to define, promote and improve the professions of privacy, AI governance and digital responsibility globally, and it lists certifications, certification FAQs and certification training among its offerings. Candidates typically prepare for a China-focused privacy exam by working through the underlying statute and its implementing rules, then the enforcement record, then operational compliance design, then cross-border transfer mechanics - the four areas such a credential normally tests. This page does not claim any official affiliation with the IAPP, and it does not state exam length, time limit, passing score, fee, retake policy or validity period, because the IAPP certification page for this credential returned a 404 error when retrieved and the retrieved IAPP material contains no exam logistics. Verify all logistics directly with the IAPP before booking: consult https://iapp.org/certify, the certification FAQ at https://iapp.org/certify/faqs, and the training pages at https://iapp.org/train. Treat any figure you see elsewhere as unverified until the IAPP confirms it.
What you'll study
About IAPP CIPP/CN preparation
How many questions are on the CIPP/CN exam and how long do I get?
We cannot state either figure. The IAPP certification page for this credential returned a 404 error when retrieved, and the retrieved IAPP pages contain no item count or time limit. Check https://iapp.org/certify and the certification FAQ at https://iapp.org/certify/faqs for the current numbers before you schedule.
What score do I need to pass, and what does it cost?
Neither is published in the material retrieved here, so we do not report a passing score or a fee. Both change over time and are set by the IAPP. Confirm them on the certification pages or with IAPP customer service before you budget or book a seat.
If I fail, how soon can I retake the exam?
The retake policy is not stated in the retrieved IAPP material, so we cannot give a waiting period or a retake fee. Ask the IAPP directly, and note that retake terms are usually set out in the certification handbook or FAQ rather than on marketing pages.
How long is the certification valid before I must recertify?
We do not state a validity period because the retrieved material does not contain one. IAPP certifications generally carry maintenance obligations, but the specific term and continuing-education requirements for this credential must be confirmed with the IAPP before you rely on them for planning.
What does the exam actually test?
Expect coverage of China's data protection law and policy, its regulation and enforcement, operational compliance practice, and the cross-border landscape including transfer mechanisms. Build your study plan around those four areas, and anchor each one in the statute text and published implementing rules rather than in secondary summaries.
Is this exam harder than the other IAPP privacy certifications?
We cannot rank difficulty, and the IAPP does not publish comparative pass rates in the material retrieved here. Candidates without Mandarin reading ability or without exposure to Chinese regulatory drafting usually need more time, because the operative rules and enforcement notices are written in Chinese.
In what order should I study?
Start with the statute and its definitions, then the implementing regulations and national standards, then enforcement decisions and regulator guidance, then operational compliance design, and finish with cross-border transfer routes. Doing enforcement before you know the statutory text produces memorized outcomes without the reasoning the questions reward.
What are the most common ways candidates lose marks?
Treating China's regime as a copy of the GDPR, confusing the separate transfer routes and their thresholds, and ignoring sectoral rules that sit alongside the main law. Another frequent error is studying English-language commentary only, which drifts from the Chinese text that enforcement actually applies.
How should I prepare, and does the IAPP offer training?
The IAPP lists certification training at https://iapp.org/train and new-to-privacy training at https://iapp.org/train/foundations. Whether a course specific to this credential exists is not stated in the retrieved material, so check those pages. Supplement any course with primary-source reading of the law, rules and published enforcement actions.
Where can I verify exam logistics before booking?
Use https://iapp.org/certify for the certification catalogue and https://iapp.org/certify/faqs for the certification FAQ, both linked from the IAPP site. The dedicated page at https://iapp.org/certify/cipp-cn returned a 404 error when retrieved, so start from the catalogue and search rather than trusting a bookmarked deep link.