Talk privacy and network with local members at IAPP KnowledgeNet Chapter meetings, taking place worldwide.
IAPP Job BoardLooking for a new challenge, or need to hire your next privacy pro? The IAPP Job Board is the answer.
IAPP CalendarReview a filterable list of conferences, KnowledgeNets, LinkedIn Live broadcasts, networking events, web conferences and more.
Chinese Personal Information Protection (CIPP/CN)
Learn compliance with the three major laws (PIPL, CSL, DSL) forming the framework of Chinese privacy.
Artificial Intelligence Governance ProfessionalLearn how to surround AI with policies and procedures that make the most of its potential by reducing its risks.
European Data Protection (CIPP/E)Understand Europe’s framework of laws, regulations and policies, most significantly the GDPR.
U.S. Private-Sector Privacy (CIPP/US)Steer a course through the interconnected web of federal and state laws governing U.S. data privacy.
Canadian Privacy (CIPP/C)Learn the intricacies of Canada’s distinctive federal/provincial/territorial data privacy governance systems.
Privacy Program Management (CIPM)Develop the skills to design, build and operate a comprehensive data protection program.
Privacy in Technology (CIPT)Add to your tech knowledge with deep training in privacy-enhancing technologies and how to deploy them.
Foundations of Privacy and Data ProtectionIntroductory training that builds organizations of professionals with working privacy knowledge.
Privacy Law Specialist Training (PLS)
Meet the stringent requirements to earn this American Bar Association-certified designation.
CIPP/CN Certification
For professionals who are responsible for compliance with China's major privacy laws - PIPL, DSL, CSL.
AIGP Certification
Ensures individuals responsible for AI systems can reduce the risks associated with this technology.
CIPP Certification
The global standard for the go-to person for privacy laws, regulations and frameworks
CIPM Certification
The first and only privacy certification for professionals who manage day-to-day operations
CIPT Certification
As technology professionals take on greater privacy responsibilities, our updated certification is keeping pace with 50% new content covering the latest developments.
FIP Designation
Recognizing the advanced knowledge and issue-spotting skills a privacy pro must attain in today’s complex world of data privacy.
Privacy Law Specialist
The first title to verify you meet stringent requirements for knowledge, skill, proficiency and ethics in privacy law, and one of the ABA’s newest accredited specialties.
Certificação CDPO/BR
Mostre seus conhecimentos na gestão do programa de privacidade e na legislação brasileira sobre privacidade.
Access all reports and surveys published by the IAPP.
The IAPP publishes longform, web-based resource articles to provide in-depth analysis on relevant topics in the privacy space.
Access all white papers published by the IAPP.
Access all infographics published by the IAPP.
The Privacy Advisor Podcast provides interviews with the privacy world's most interesting voices.
The IAPP's video library provides insights, reactions and opinions on a range of topics, including regulatory developments, areas of privacy operations management and more.
On this topic page, you can find the IAPP’s collection of coverage, analysis and resources covering AI connections to the privacy space.
On this page, you’ll find articles and tools to help you get a basic understanding of the job of the privacy pro and data protection laws and practices around the globe.
Data Protection Intensive: UK
Explore the full range of U.K. data protection issues, from global policy to daily operational details.
Global Privacy Summit
The world's largest forum for connecting with other privacy, AI governance and digital responsibility professionals. Registration is open for the 2025 event.
AI Governance Global Europe
Join us in Dublin for the leading European conference on AI governance, addressing challenges and impacts of the EU AI Act.
Privacy. Security. Risk. (P.S.R.)
P.S.R. focuses on the intersection of privacy, AI governance, digital responsibility and technology. The 2025 call for speaking proposals is open.
Europe Data Protection Congress
Call for speaking proposals is open. Add yourself to the list of thought leaders who will take the stage at Congress 2025.
ANZ Summit
Gain exclusive insights on privacy issues affecting business in Australia and Aotearoa New Zealand.
AI Governance Global North America
Join us in Boston as we focus on the unique and broad array of challenges AI governance professionals face in North America.
Asia Privacy Forum
The call for speaking proposals is open. Submit a proposal to share your expertise on your favorite privacy topic at Forum 2025.
Speak at an IAPP EventView our open calls and submission instructions.
Sponsor an EventIncrease visibility for your organization — check out sponsorship opportunities today.
Resource Center / Topic Pages / Incident and Breach Management
TOPIC PAGE
On this topic page, you’ll find news, resources, tools and insights covering cyber incidents and data breaches, with guidance on how best to respond as an organization or individual in the occurrence of being impacted by a breach.
This report represents the most comprehensive study of privacy risk undertaken by the IAPP in collaboration with KPMG.
Managing Data Breach Liability & Exposure
Organizations no longer can afford to ignore or delay their privacy and security responsibilities. This web conference will cover the legal issues surrounding data breaches and how to lessen their impacts.
Read More
Digital incident and litigation response playbook
This web conference discuss the significant range and unique nature of digital incidents that can impact companies and how such incidents are urgent drivers for digital governance to enable timely response plans.
Read More
State Data Breach Notification Chart
To assist practitioners, the IAPP created a chart containing information from each state or territory’s data breach notification law concerning entities that own, control or process personal data.
Read More
This article discusses privacy attacks related to AI systems and their systematization in a recent NIST publication.
Read More
AI incident response plans: Not just for security anymore
Artificial intelligence systems, much like any other technology system, are susceptible to failure. This article explains how preparation for potential failure across the design, development, sale and operation phases of a given system “can make all the difference between a timely, controlled response and chaos.”
Read More
Verizon Data Breach Investigation Reports
Law firm releases annual GDPR and data breach survey results
Lions and tigers and bears, oh my! Global legal risks in cybersecurity investigations
Data Security Incident Report (BakerHostetler)
Genetic data of 4M service users leaked online
IBM report shows 15% increase in data breach costs
Liability for software insecurity: Striking the right balance
Privacy Incident Management Simplified
Reporting cyber incident requirements in some Latin American jurisdictions
AEPD creates tool for data controllers to identify relevant authorities to report a breach
Cyber Incident Reporting Simplified with Privacy Best Practices
APWG – Phishing Activity Trends Report
XDR: Redefining the future of cybersecurity
Third circuit shows how to establish standing in data breach cases
Number of US data breaches dropped in first half of 2022
Data Visualization: World’s Biggest Data Breaches & Hacks
Ransomware attacks on the rise in 2022
Exploring Organisational Experiences of Cyber Security Breaches
Encrypted messaging service hacked as result of cloud communications company breach
ICO Data security incident trends
Experian Data Breach Industry Forecast
FTC signals expanded breach notice obligations
Measures that Educational Institutions Should Take to Prepare for Ransomware Attacks
Report: Ransomware gangs may have resources to hire AI experts
Zero Day Exploits for Privacy Professionals: Risks, Mitigation and Due Diligence
Ransomware: 5 critical tips for organizations
As data breaches near ‘all time high,’ Senate committee talks regulation
Ransomware, data protection and compliance
Singapore’s PDPA: What to Know For Incident Response
Report: 94% of organizations experienced insider data breach in past year
Chronicling two years of NHS data breaches
What the world of sports teaches us about incident preparedness and response
Kroll: 2021 Data Breach Outlook
Handbook on How to Guard Against Common Types of Data Breaches
DLA Piper GDPR Data Breach Survey 2021
OPC – Breach video series for your business
Top 6 Reasons Why the Consumer Response to a Data Breach Will Fail
Your privacy practices predict your data-breach future
Study: 92% of firms feel data breach vulnerability
Breaches at our front door: What we can learn from Clearview AI
Managing data breaches in the cloud
How to use 2020 to improve your incident response
How to evaluate your privacy-incident response program
How long should it take to risk-score a privacy incident?
How to accelerate breach-notification timeframes
How to operate under Canada’s new breach notification landscape
Bryan Cave Data Breach Litigation Report
Seeking Solutions: Aligning Data Breach Notification Rules Across Borders
How often do notification exceptions apply? We look to the data
Data breach insurance: A three-part problem
Benchmarking for GDPR: How often are orgs reporting data breaches to authorities and subjects?
72 hours and counting: Do’s and don’ts of incident response
Canada’s Data Breach Notification Law Update
What To Do When Faced With a Privacy Breach: Guidelines for the Health Sector
Some Privacy Practices May Result in Under-Reporting of Breach Incidents
Data security requirements in multistate breach settlements
Do I need to report this breach?
Benchmarking your Privacy Incident Management Program – Article Series
How to Shop Smart for Cyberinsurance – Article Series
Incident Response – Article Series
Get ready to practice breach response in the EU
How startups can beat breaches on a budget
Top five company fails in prepping for a breach
From devastation to salvation: How to benefit from a breach
My company has had a breach: Whom do I have to notify?
The misconceptions of data breach fatigue
What If You Had An Employee Data Breach?
