CIPT Exam — Information & Free Practice

The authority publishes question-count ranges for each content area. The practice percentages below use the midpoint of each range, normalized to 100%; they are not exact percentages published by the authority. Practice question counts may differ slightly because of rounding.

• The privacy technologist’s role in the context of the organization — Official range: 15–19 questions (Practice allocation: 22.67%)

  • Identify and implement legal and procedural roles and responsibilities
  • Identify and implement technical roles and responsibilities
  • Demonstrate knowledge of privacy risk models and frameworks and their roles in legal requirements and guidance
  • Understand the connection between data ethics and data privacy
• Data collection, use, dissemination and destruction — Official range: 19–23 questions (Practice allocation: 28%)

  • Demonstrate how to minimize privacy risk during personal data collection
  • Demonstrate how to minimize privacy risk during personal data use
  • Demonstrate how to minimize privacy risk during personal data dissemination
• Privacy risk management — Official range: 17–21 questions (Practice allocation: 25.33%)

  • Demonstrate how to minimize the threat of intrusion and decisional interference
  • Identify privacy risks related to software security
  • Understand the privacy risks and impact of techniques that enable tracking and surveillance
  • Understand the privacy risks and impact involved when using workplace technologies
  • Demonstrate how to monitor and manage privacy risk
• Privacy by design — Official range: 7–9 questions (Practice allocation: 10.67%)

  • Implement privacy by design principles
  • Evaluate privacy risks in user experiences
• Privacy engineering and privacy governance — Official range: 9–11 questions (Practice allocation: 13.33%)

  • Understand and implement privacy engineering objectives
  • Manage and monitor privacy-related functions and controls