CIPM

Breadth

IAPP · Blueprint 4.2.0 · verified 21 September 2026

Programme management rather than law. The answer is usually the one that makes the programme operate, not the one that cites the strongest authority.

Start free

Membership is free and takes a minute. It is what saves your position, your bands and your plan.

Join free to start Already a member? Sign in

Blueprint

1 Privacy Program: Developing a Framework 14 to 18 q

2 Privacy Program: Establishing Program Governance 12 to 16 q

3 Privacy Program Operational Life Cycle: Assessing Data 12 to 16 q

4 Privacy Program Operational Life Cycle: Protecting Personal Data 9 to 13 q

5 Privacy Program Operational Life Cycle: Sustaining Program Performance 7 to 9 q

6 Privacy Program Operational Life Cycle: Responding to Requests and Incidents 10 to 14 q

Weightings taken from the owner's published exam outline. Owner's site.

What this pathway contains

240Flashcards

Blueprint-weighted, one idea per card, with the objective each one serves.

0Practice items

A direction-finder, and a check per domain with rationales withheld until you submit.

90Readiness form

Matches the real exam's length. A band is released only under four conditions.

After the exam

The certificate is the start of the job, not the end of it. This exam tests what you know about the subject. The Association's courses cover what the role asks for once the certificate is on the wall, and each one ends in an artefact you keep.

Browse the course catalog

CIPP, CIPM, CIPT and AIGP are marks of the IAPP. The Association is not affiliated with, endorsed by or accredited by the IAPP. Pathway activity does not earn ALCs and does not lead to an Association credential.