As most privacy professionals are aware, changes in the privacy landscape occur at a rapid pace. In order to stay current, the IAPP annually updates the contents of its certification exams to include new topics, laws and regulations that our board members have identified as being particularly important for candidates to know.

On August 1st of 2017, we will be releasing updated exam forms that include new content for the following exams:

  • Certified Information Privacy Professional/United States (CIPP/US)
  • Certified Information Privacy Manager (CIPM)
  • Certified Information Privacy Technologist (CIPT)

The updated versions of these three exams will have the same number of questions, the same time limit, and much of the same content that appears in the current versions. However, candidates should be aware that questions on a variety of new topics per designation may appear, and prepare accordingly:


  • The GDPR and its effect on American organizations
  • The 21st Century Cures Act and its privacy implications
  • The Cybersecurity Information Sharing Act
  • Privacy Shield
  • New threats to online privacy, such as ransomware
  • Trends in state laws, such as new breach notification laws in California and Tennessee


  • Privacy management in a GDPR context, including principles of Privacy by Design and by Default
  • Changes in vendor management obligations
  • The heightened importance of data mapping
  • Increased emphasis on incident response preparation, through tools such as table-top exercises


  • Common IT Frameworks
  • Challenges presented by new regulations such as the GDPR
  • Recent security incidents and enforcement actions
  • Advances in authentication techniques
  • Developments in cryptographic protocols (TLS 1.3)
  • Concerns involving recent technologies (GPS tracking, drones, the Internet of Things)
  • New online threats such as ransomware

These changes will result in updated versions of the CIPP/US and CIPT Bodies of Knowledge and Exam Blueprints, which can be viewed here. Please note that although there will be new CIPM exam questions, these will fall into categories already represented on the current Body of Knowledge; therefore, there is no updated Body of Knowledge or Blueprint for the CIPM designation.