CIPM practice examsIn development
Certified Information Privacy Manager
Operationalising privacy rather than interpreting it: building a programme framework with governance and a Data Protection Officer, inventorying and assessing data, protecting it and its transfers, and sustaining the programme through measurement, rights requests and breach response.
What you get
Papers are cut from the bank and weighted like the real exam, and no question appears in two of them. Every wrong answer comes back on later days until you have it right.
What the exam covers
| Developing a privacy programme framework and establishing programme governance | Not published |
| Assessing data and protecting personal data | Not published |
| Sustaining programme performance, and responding to requests and incidents | Not published |
Two sample questions
1. Which is a reason to keep the programme aligned with changing law?
- Enforcement action becomes impossible
- Compliance is sustained as the law changes — correct
- The programme is certified by the regulator
- The records of processing can be simplified
Why: Keeping the programme aligned with changing law sustains compliance.
2. What factors raise processing risk?
- Scale and sensitivity — correct
- Low volume
- No data for this instance
- Vendor names
Why: Large-scale or sensitive processing raises risk.
The real CIPM exam
| Length | 150 minutes |
|---|---|
| Questions | 90, of which 15 are unscored pretest items |
| Pass mark | 300 on a scale of 100 to 500 |
| Price | Around $550 USD for the first attempt, with IAPP membership priced separately |
| Recommended before you sit it | None. It is commonly taken alongside CIPP/E to earn the CIPP and CIPM combination. |
| Valid for | 2 years, maintained with continuing privacy education credits |
Exam facts as published by IAPP; always check the vendor’s page before you book.
Study CIPM with Chiron
Chiron is invitation-only while we are in beta, and nothing is for sale yet: invited accounts use every paper, drill and course note for free.