Overview
The CIPM is the IAPP's credential for privacy program management. Where each CIPP exam tests knowledge of privacy law in one region, the CIPM tests how to establish, maintain, and manage a privacy program across the information life cycle, from developing a framework and setting governance to assessing data, protecting personal data, measuring performance, and responding to requests and incidents. It isn't tied to one country.
Privacy program managers, chief privacy officers, data protection officers, and privacy analysts who handle day-to-day operations are the usual audience. The IAPP offers the exam in English, French, German, Brazilian Portuguese, and Chinese, and ANAB accredits the credential under ISO/IEC 17024:2012. Holders can pair it with a law-focused CIPP, and the IAPP's Fellow of Information Privacy designation asks for an active CIPP plus an active AIGP, CIPM, or CIPT, 3 years of privacy work, and peer references. The CIPT is the closest sibling. It focuses on privacy in technology and product design.
What the exam covers
The CIPM body of knowledge (version 4.2.0, effective 1 September 2025) has 6 domains, and the IAPP publishes a minimum and maximum number of questions for each instead of percentage weights.
| Domain | Weight |
|---|---|
| Privacy Program (Developing a Framework) | 14–18 questions |
| Privacy Program (Establishing Program Governance) | 12–16 questions |
| Privacy Program Operational Life Cycle (Assessing Data) | 12–16 questions |
| Privacy Program Operational Life Cycle (Protecting Personal Data) | 9–13 questions |
| Privacy Program Operational Life Cycle (Sustaining Program Performance) | 7–9 questions |
| Privacy Program Operational Life Cycle (Responding to Requests and Incidents) | 10–14 questions |
Requirements
The IAPP does not publish a work experience requirement for the CIPM exam.
- Format
- Multiple-choice exam in English, French, German, Brazilian Portuguese, or Chinese
- Questions
- 90 multiple-choice questions, including unscored questions (the split is not published on the certification page)
- Time
- 2.5 hours, with a 15-minute break
- Passing score
- 300 on a scaled range of 100 to 500
- Delivery
- Pearson VUE test centres or online proctoring through Pearson VUE OnVUE
The exam must be taken within 1 year of purchase. IAPP membership or a certification maintenance fee is required before the certification becomes active after a pass.
Cost
Exam fee: USD 550 (same price for members and non-members). Price shown on the IAPP store, checked 2026-10-12. The IAPP lists prices in US dollars only, retakes of a failed exam are discounted, and prices change.
Keeping it current
- Cycle
- 2 years
- Continuing education
- 20 CPE credits per certification per 2-year term
- Fees
- USD 250 certification maintenance fee per 2-year term, included in IAPP membership (USD 295 a year)
How to verify that someone holds it
The IAPP verifies certifications through its customer support team, so an employer should ask the holder for their certificate number. Holders also receive a digital certificate from Accredible that they can share. Use the issuer’s verification page.
On InfoSecHub, a CIPM listed on a profile shows Verified by Credly only when a current Credly badge issued to that person confirms it.
Typical roles
- Privacy program manager
- Chief privacy officer
- Data protection officer
- Privacy analyst
Related frameworks
Official resources
From IAPP. Links open the issuer’s site.
- CIPM official page, IAPP
- CIPM body of knowledge and exam blueprint, IAPPexam-outline
- IAPP privacy candidate handbook, IAPPhandbook
- Certification FAQs (including verification), IAPPverification
References
- CIPM exam (store page with price, question count, timing, and languages), IAPP
- IAPP privacy candidate handbook, version 5.3.2, IAPP
- CIPM body of knowledge, version 4.2.0, IAPP
- ANAB accreditation, IAPP
- IAPP certification CPE policy, version 3.3.1, IAPP
Reviewed 2026-10-12. Exam details, prices, and renewal rules change. Confirm them on the IAPP website before you register. InfoSecHub is not affiliated with IAPP.