OpenExamsFREE PRACTICE — ANY EXAM

Certified Information Privacy Manager — Requirements & Free Practice

US · License preparation

200 free questions · Answer explanations · No signup required

Choose what to practice

Start with an exam below. Your examination requirements depend on your application pathway. View licensing requirements

Loading selected examination banks…

Licenses, application pathways and examination requirements

Each license and applicant pathway has its own requirements and exemptions. Choosing practice questions does not determine your eligibility.

Certified Information Privacy Manager

Licensing authority: IAPP

Initial by examination
CIPM Exam
Activation
Passing the examination is followed by IAPP membership or payment of a certification maintenance fee to activate the credential; this is a non-exam condition.

CIPM Exam

Provider
IAPP, delivered through Pearson VUE
Format
Multiple-choice computer-based examination, including scenario-based and multi-select questions
Exam questions
Total questions: 90.
Time limit
2.5 hours with a 15-minute break
Passing score
300 on IAPP's 100-500 reporting scale
Examination outline

The authority publishes question-count ranges for each content area. The practice percentages below use the midpoint of each range, normalized to 100%; they are not exact percentages published by the authority. Practice question counts may differ slightly because of rounding.

  • Privacy Program: Developing a Framework — Official range: 14–18 questions (Practice allocation: 21.33%)
    • Define program scope and develop a privacy strategy
    • Communicate organizational vision and mission statement
    • Indicate in-scope laws, regulations and standards applicable to the program
  • Privacy Program: Establishing Program Governance — Official range: 12–16 questions (Practice allocation: 18.67%)
    • Create policies and processes to be followed across all stages of the privacy program life cycle
    • Clarify roles and responsibilities
    • Define privacy metrics for oversight and governance
    • Establish training and awareness activities
  • Privacy Program Operational Life Cycle: Assessing Data — Official range: 12–16 questions (Practice allocation: 18.67%)
    • Document data governance systems
    • Evaluate processors and third-party vendors
    • Evaluate physical and environmental controls
    • Evaluate technical controls
    • Evaluate risks associated with shared data in mergers, acquisitions and divestitures
  • Privacy Program Operational Life Cycle: Protecting Personal Data — Official range: 9–13 questions (Practice allocation: 14.67%)
    • Apply information security practices and policies
    • Integrate the main principles of Privacy by Design (PbD)
    • Apply organizational guidelines for data use and ensure technical controls are enforced
  • Privacy Program Operational Life Cycle: Sustaining Program Performance — Official range: 7–9 questions (Practice allocation: 10.67%)
    • Use metrics to measure the performance of the privacy program
    • Audit the privacy program
    • Manage continuous assessment of the privacy program
  • Privacy Program Operational Life Cycle: Responding to Requests and Incidents — Official range: 10–14 questions (Practice allocation: 16%)
    • Respond to data subject access requests and privacy rights
    • Follow organizational incident handling and response procedures
    • Evaluate and modify current incident response plan
Examination sources