Expected CIPT Exam Topics, as suggested by IAPP :

• Module 1: Privacy Risks, Threats and Violations: This section of the CIPT exam assesses the ability of information privacy technologists to connect data ethics and data privacy. It also evaluates your proficiency in minimizing privacy risks during personal data collection, use, and dissemination, including mitigating intrusion and decisional interference threats. Finally, your knowledge of software security-related privacy risks will be tested.
• Module 2: Privacy-Enhancing Strategies, Techniques and Technologies: Information privacy technologists will have their skills evaluated on identifying and implementing data-oriented, process-oriented, and data protection strategies, including privacy-enhancing techniques, in this portion of the CIPT exam.
• Module 3: Privacy Engineering: This topic tests the understanding of information privacy technologists about privacy engineering organizational role and objectives. Your ability to identify and evaluate privacy design patterns and manage privacy risks throughout the development lifecycle will be measured.
• Module 4: Evolving or Emerging Technologies in Privacy: In this section, the CIPT exam gauges the comprehension of information privacy technologist about privacy implications related to robotics and IoT, e-commerce, biometrics, and technology use in the workplace.
• Module 5: Privacy by Design: This section will measure skills of information privacy technologist in implementing the privacy by design methodology, evaluating privacy risks in user experiences, applying Value Sensitive Design, and managing privacy-related functions and controls.
• Module 6: The Privacy Technologist’s Role in the Context of the Organization: Here, the CIPT exam assesses the grasp of information privacy technologists of general, technical, and specialized roles and responsibilities within an organization.
• Module 7: Foundational Principles: This section of the CIPT exam will test the knowledge of information privacy technologists about privacy risk models and frameworks, privacy by design principles, privacy-related technology fundamentals, and the data life cycle.

Expected AIGP Exam Topics, as suggested by IAPP :

• Module 1: Understanding the Foundations of Artificial Intelligence: This topic defines AI and machine learning. It also provides an overview of the different types of AI systems and their use cases.
• Module 2: Understanding AI Impacts and Responsible AI Principles: This topic identifies different risks that that ungoverned AI systems. The topic also describes features and principles that are essential for trustworthy and ethical AI.
• Module 3: Understanding How Current Laws Apply to AI Systems: It focuses on laws that govern the use of artificial intelligence.
• Module 4: Understanding the Existing and Emerging AI Laws and Standards: This topic discusses global AI-specific laws such as the EU AI Act and Canada’s Bill C-27.
• Module 5: Understanding the AI Development Life Cycle: The topic outlines the context in which AI risks are managed.
• Module 6: Implementing Responsible AI Governance and Risk Management: It explains the collaboration of major AI stakeholders in a layered approach.
• Module 7: Contemplating Ongoing Issues and Concerns: The topic focuses on issues around AI governance.

Expected CIPM Exam Topics, as suggested by IAPP :

• Module 1: Privacy Program: Developing a Framework: In this topic, the IAPP Information Privacy Manager learns to define the scope of a privacy program and develop a robust strategy aligned with organizational goals. It emphasizes communicating the organization’s vision and mission while ensuring compliance with applicable laws, regulations, and standards. This knowledge underpins the ability to establish a clear, comprehensive foundation for privacy management in alignment with the CIPM exam’s focus.
• Module 2: Privacy Program Operational Life Cycle: Sustaining Program Performance: This topic gives knowledge about metrics to measure the performance of the privacy program. The topic also covers the audit of the privacy program and management of continuous assessment of the privacy program.
• Module 3: Privacy Program: Establishing Program Governance: This section equips the Information Privacy Manager with skills to create and implement policies and processes for all privacy program stages. It highlights defining roles and responsibilities, establishing measurable privacy metrics, and fostering training and awareness activities. These governance practices ensure effective oversight and align with CIPM exam objectives, preparing managers to structure and manage privacy programs effectively.
• Module 4: Privacy Program Operational Life Cycle: Assessing Data: The topic prepares the Information Privacy Manager to document data governance systems and evaluate technical, physical, and environmental controls. It covers assessing processors, third-party vendors, and risks linked to mergers, acquisitions, and divestitures.
• Module 5: Privacy Program Operational Life Cycle: Protecting Personal Data: In this topic, the Information Privacy Manager focuses on applying information security practices, embedding Privacy by Design principles, and enforcing technical controls aligned with organizational guidelines.
• Module 6: Privacy Program Operational Life Cycle: Responding to Requests and Incidents: This section enables the Information Privacy Manager to handle data subject access requests, ensure privacy rights compliance, and follow organizational incident response procedures. Evaluating and refining incident response plans equips managers with the expertise to address incidents effectively.

Expected CIPP-A Exam Topics, as suggested by IAPP :

• Module 1: Privacy Fundamentals: This topic sets the foundation, covering modern privacy principles, global adequacy decisions, and the definition of personal information. It ensures IAPP privacy professionals in Asia understand the core concepts of data privacy, which are essential for their practice.
• Module 2: Singapore Privacy Laws and Practices: Focusing on Singapore’s privacy landscape, this topic of the IAPP CIPP-A exam covers the history, key legislation (PDPA), and enforcement, providing future privacy professionals in Asia with the knowledge to navigate compliance in the country.
• Module 3: Hong Kong Privacy Laws and Practices: The privacy laws of Hong Kong are the focus here, including their history, the PDPO, and enforcement by the PCPD, equipping aspiring IAPP privacy professionals in Asia with region-specific expertise.
• Module 4: India Privacy Law and Practices: India’s unique privacy legal framework is explored, covering its history, the IT Act, and enforcement mechanisms. This topic of the Certified Information Privacy Professional/Asia exam provides professionals with insights into this complex and evolving system.
• Module 5: Common Themes: This of the CIPP-A exam encourages comparisons between the protections and principles. It also focuses on data subject rights as well. Covering this topic enables IAPP privacy professionals in Asia to identify commonalities and adapt their practices across Asia

Expected CIPP-C Exam Topics, as suggested by IAPP :

• Module 1: Introduction to Privacy in Canada: This topic focuses on equipping information privacy professionals with an understanding of the Canadian governmental structure and its relationship to privacy. It emphasizes privacy basics and the development of privacy principles in Canada. The topic also introduces international privacy standards, encouraging their implementation in applicable scenarios.
• Module 2: Canadian Privacy Laws and Practices – Private Sector: Information privacy professionals gain insight into the Privacy Principles underpinning the Personal Information Protection and Electronic Documents Act (PIPEDA) and provincial private-sector laws. The topic identifies scenarios where private-sector legislation overrides PIPEDA and delves into Canada’s Anti-Spam Legislation (CASL).
• Module 3: Canadian Privacy Laws and Practices – Public Sector: This section highlights the Privacy Principles foundational to the Privacy Act, providing tools for conducting Privacy Impact Assessments. It also examines the relevance of Freedom of Information and Protection of Privacy Acts across provinces and territories.
• Module 4: Canadian Privacy Laws and Practices – Health Sector: Aspiring IAPP Information privacy professionals explore the application of health privacy acts across provinces and territories. This topic enhances understanding of scenarios requiring these acts, ensuring informed decisions in safeguarding personal health information. The focus is on sector-specific privacy challenges in healthcare.

Expected CIPP-E Exam Topics, as suggested by IAPP :

• Module 1: Introduction to European Data Protection: This topic provides European Information Privacy Professionals with foundational knowledge of data protection’s historical development, EU institutional roles, and the overarching legislative framework.
• Module 2: European Data Protection Law and Regulation: Through this topic, European Information Privacy Professionals explore core GDPR elements, including data protection concepts, processing principles, lawful criteria, and accountability requirements. It delves into data subjects’ rights, international data transfers, supervision, and enforcement, highlighting consequences for non-compliance.
• Module 3: Compliance with European Data Protection Law and Regulation: This topic examines privacy implications in employment, surveillance, direct marketing, and internet communications. By addressing real-world applications, European Information Privacy Professionals gain practical insights to navigate specific compliance challenges.

Expected CIPP-US Exam Topics, as suggested by IAPP :

• Module 1: Introduction to the U.S. Privacy Environment: This topic equips IAPP Information Privacy Professionals with foundational knowledge of the structure of U.S. law, focusing on its fragmented nature. It also explains enforcement mechanisms for privacy and security laws across federal and state levels. Lastly, it highlights the U.S. perspective on managing information, offering a comprehensive framework for understanding privacy dynamics critical to professional practice.
• Module 2: Limits on Private-sector Collection and Use of Data: Information Privacy Professionals gain insights into sector-specific data protection frameworks, including FTC’s cross-sector guidelines and rules for healthcare, financial, and educational institutions. These regulations limit data collection and usage practices, emphasizing compliance and consumer protection.
• Module 3: Government and Court Access to Private-sector Information: This topic provides an overview of government and legal system access to private-sector data, addressing privacy challenges related to law enforcement, national security, and civil litigation. It equips Information Privacy Professionals to assess privacy risks and ensure compliance when responding to governmental or judicial data requests.
• Module 4: Workplace Privacy: Workplace privacy is explored through its lifecycle—before, during, and after employment—providing Information Privacy Professionals with the knowledge to manage employee data responsibly. The topic emphasizes balancing organizational needs with compliance obligations, ensuring privacy standards are upheld in employment settings.
• Module 5: State Privacy Laws: This topic examines the interplay between federal and state authority in privacy regulation, highlighting diverse data privacy and security laws. Information Privacy Professionals also learn about state-specific data breach notification laws.