CIPM Certified Information Privacy Manager Exam

Operationalizing Privacy – Turning Policies into Programs
Make data privacy regulations work for your organization by understanding how to implement them in day-to-day operations. Learn to create a company vision, structure a data protection team, develop and implement system frameworks, communicate to stakeholders, measure performance and more.

How to create a company vision
How to structure the privacy team
How to develop and implement a privacy program framework
How to communicate to stakeholders
How to measure performance
The privacy program operational life cycle

The CIPM body of knowledge outlines all the concepts and topics that you need to know to become certified. The exam blueprint gives you an idea of how many questions from each topic area you can expect on the exam. These documents, as well as additional certification resources and helpful links, can be found here.

We strongly encourage all potential test takers to read our 2020 Certification Candidate Handbook before testing for details on our testing policies and procedures.

How to Prepare
Earning respected credentials requires a rigorous certification process, which includes passing demanding exams. IAPP exams have a reputation for being difficult to pass on the first try. We strongly recommend careful preparation, even for degreed professionals who have passed other certification tests.

Preparation makes all the difference. In general, we recommend that you train and study for a minimum of 30 hours.

We want you to succeed. Please take advantage of IAPP resources to get through exams with as little anxiety as possible.

Tips for effective studying
Consider enrolling in an IAPP training class. With multiple in-person, live online and online options, IAPP trainings are created from the same topic outline from which exam questions are drawn. PLEASE NOTE that completing a training course does not guarantee passing an exam. Additional preparation is essential, so:

Self-assess—Each IAPP exam comes with two tools for determining how ready you are:

The body of knowledge is an outline of the information covered in the exam. Use it to identify topics you are and are not familiar with.
The exam blueprint tells you how many questions to expect on each topic. Use it to map out a study strategy—allowing more time for topics with many questions, for example.

Use your textbook properly—Textbooks are included with purchase of in-person, live online and online training, and are also sold separately through the IAPP store. Start by reading the table of contents. Note which topics are new to you. That will give you a feel for how much study and review time you need. When you start reading:

Highlight important points in each chapter
Copy out key passages; it will help you remember them
Review each chapter to make sure you’ve captured the key points before moving on

Create flash cards—As you read your textbook, articles, web pages, etc., copy new terms onto notecards. Write their definitions on the other side. Quiz yourself. Use the IAPP’s glossary of privacy terms to look up unfamiliar terms and make flash cards of them, also.

Form a study group—Discussing the material with your coworkers and colleagues is a great way to remember material and understand it more deeply.

Learn in context—It’s easier and more interesting to learn a subject you’re going to use in real life. IAPP publications show how privacy affects our lives and businesses:
Privacy Perspectives
The Privacy Advisor
Privacy Tracker
Privacy Tech
DPO Confessional

Get familiar with privacy news and issues by subscribing to the Daily Dashboard and the IAPP’s curated regional news digests:
Daily Dashboard
Canada Dashboard Digest
Asia-Pacific Dashboard Digest
Latin America Dashboard Digest
Europe Data Protection Digest
U.S. Privacy Digest

Explore our information-packed Resource Center, participate in educational web conferences and listen to The Privacy Advisor Podcast.

Also, compare what’s going on in privacy today with your job. What privacy issues could affect your work and career?
Use questions to find answers—Utilize sample questions to help you review what you’ve studied and identify weak areas. Re-read notes and chapters on those subjects. Ask your study partners questions. Search for articles that approach the subject from different directions.

QUESTION 1
In addition to regulatory requirements and business practices, what important factors must a global privacy strategy consider?

A. Monetary exchange
B. Geographic features
C. Political history
D. Cultural norms

Correct Answer: B

QUESTION 2
How are individual program needs and specific organizational goals identified in privacy framework development?

A. By employing metrics to align privacy protection with objectives
B. Through conversations with the privacy team
C. By employing an industry-standard needs analysis
D. Through creation of the business case

Correct Answer: A

QUESTION 3
In privacy protection, what is a “covered entity”?

A. Personal data collected by a privacy organization
B. An organization subject to the privacy provisions of HIPAA
C. A privacy office or team fully responsible for protecting personal information
D. Hidden gaps in privacy protection that may go unnoticed without expert analysis

Correct Answer: B

QUESTION 4
Which of the following is an example of Privacy by Design (PbD)?

A. A company hires a professional to structure a privacy program that anticipates the increasing demands of new laws.
B. The human resources group develops a training program from employees to become certified in privacy policy.
C. A labor union insists that the details of employers’ data protection methods be documented in a new contract.
D. The information technology group uses privacy considerations to inform the development of new networking software.

Correct Answer: C

QUESTION 5
What is the key factor that lays the foundation for all other elements of a privacy program?

A. The applicable privacy regulations
B. The structure of a privacy team
C. A privacy mission statement
D. A responsible internal stakeholder

Correct Answer: A