CIPP/E · ● Active · Professional · IAPP
The CIPP/E is the gold standard certification for GDPR practitioners and European data protection professionals. This exam validates mastery of EU data protection law, GDPR requirements, and practical privacy compliance in the European context.
Exam facts
| Field | Value |
|---|---|
| Cost | $550 USD (non-members) / $375 USD (IAPP members retaking or with existing IAPP cert) |
| IAPP Membership | $295 USD annually (Professional) · $110 USD (Non-profit, Government, Higher Ed) · $50 USD (Student) |
| Duration | 2.5 hours (150 minutes) + 15-minute break |
| Questions | 90 multiple choice (75 scored, 15 unscored pre-test items) |
| Passing | 300/500 on scaled scoring system |
| Format | Multiple choice only |
| Delivery | Pearson VUE (OnVUE online proctoring or in-person test center) |
| Languages | English, French, German |
| Valid | 2 years (renewal via CPE credits or retake) |
| Renewal | CPE (Continuing Privacy Education) credits required |
| Prerequisites | None formal; legal/privacy background helpful |
| Released | Active; current blueprint effective September 1, 2025 |
| Retiring | N/A |
Vendor source — IAPP CIPP/E Certification Page ↗
Official exam details — CIPP/E Exam - IAPP Store ↗
Certification FAQs — IAPP Certification FAQs ↗
About
The Certified Information Privacy Professional / Europe (CIPP/E) is a vendor-neutral, globally-recognized credential that validates advanced knowledge of European data protection law, specifically the General Data Protection Regulation (GDPR) and ePrivacy Directive. Launched by the International Association of Privacy Professionals (IAPP), this exam is widely considered the gold standard for privacy professionals operating in or advising on European compliance. The CIPP/E targets legal counsel, compliance officers, data protection officers, and privacy engineers who need demonstrated mastery of GDPR's complex requirements, member state implementations, and real-world compliance scenarios.
The current exam blueprint (effective September 2025) reflects the evolving regulatory landscape, including coverage of the EU AI Act and NIS2 Directive alongside core GDPR topics. Approximately 30 hours of dedicated study is recommended for preparation.
Domain context — Privacy / Legal / Compliance
European data protection regulation—a legal and compliance domain covering GDPR, ePrivacy, and sector-specific privacy requirements across EU/EEA member states. This certification ecosystem includes CIPP credentials for all major regulatory regions (US, Canada, Asia, China, Europe) plus specialized certifications for data protection officers (CIPM) and technology practitioners (CIPT).
Read full deep dive — IAPP Privacy Certifications ↗
Topics covered
The CIPP/E Body of Knowledge (BoK) is organized into two major domains with question weights per the official exam blueprint:
European Data Protection Law and Regulation (18–28 scored questions)
- EU Data Protection Directive (Directive 95/46/EC) history and evolution
- GDPR structure, recitals, and key definitions
- Personal data, processing, controller, processor, data subject
- Special categories of personal data (sensitive data)
- Processing requirements and transparency principles
- Data subject rights (access, erasure, portability, objection, restriction, rectification)
- Lawful bases for processing (consent, contract, legal obligation, vital interests, public task, legitimate interests)
- Data controller obligations (privacy by design, data protection impact assessments / DPIAs)
- Records of processing and accountability
- Data Protection Officers (DPO) role, independence, and responsibilities
- Supervisory authorities and the one-stop-shop mechanism
- Administrative fines (up to €20 million or 4% global annual turnover)
- Breach notification (72-hour reporting to authorities, data subject communication)
European Data Processing (13–21 scored questions)
- Data processing agreements (DPA) between controller and processor
- International data transfers (Standard Contractual Clauses / SCCs, Binding Corporate Rules / BCRs, adequacy decisions, Schrems II implications)
- ePrivacy Directive (Directive 2002/58/EC) and cookies / electronic communications
- National implementations across EU member states
- Employment data and HR privacy
- Children's data protection (Article 8)
- Privacy by design and privacy impact assessments
- Technical and organizational security measures
- Interaction with GDPR in context of emerging regulations (AI Act, NIS2)
Source: CIPP/E Body of Knowledge 2024–2025 ↗ · IAPP Exam Blueprint ↗
Common skills at Privacy / Legal · Professional
Shared content for the Privacy / Legal domain at Professional level — not specific to this cert.
- GDPR interpretation and compliance strategy
- Data protection impact assessment (DPIA) design and execution
- Privacy policy drafting and documentation
- Legal risk assessment in privacy contexts
- Regulatory compliance auditing
- Cross-border data transfer governance
- Privacy-by-design implementation
- Incident response and breach notification procedures
Recommended courses at Privacy / Legal · Professional
| Provider | Title | Cost | URL |
|---|---|---|---|
| IAPP (Official) | CIPP/E Self-Study Program | $495–$695 | ↗ |
| Udemy | CIPP/E Certification Masterclass | $14–$99 | ↗ |
| Udemy | CIPP E Certification Prep Course 2025 with Exam Kit | $14–$99 | ↗ |
| Udemy | GDPR Certification - Be Prepared for CIPP/E | $14–$99 | ↗ |
| Udemy | Crush the GDPR, DPO, CIPP/E Exams - 250 Sample Questions | $14–$99 | ↗ |
| LinkedIn Learning | GDPR Essentials (supplementary) | Included with subscription | ↗ |
Practice exams
| Provider | Title | Cost | URL |
|---|---|---|---|
| The PrepCast | CIPP/E Exam Simulator (120 Questions + Full Exam) | $99–$149 | ↗ |
| The PrepCast | Free CIPP/E Exam Simulator (1-week access) | Free | ↗ |
| Whizlabs | CIPP/E Practice Exam Simulator | $99–$199 | ↗ |
| Privacy Bootcamp | CIPP/E Practice Exam | $49–$99 | ↗ |
Books
| Title | Author | Publisher | Year | ISBN | URL |
|---|---|---|---|---|---|
| European Data Protection: Law and Practice (2nd Ed.) | Eduardo Ustaran | IAPP Press | 2019 | 978-1-906137-40-1 | ↗ |
| Real CIPP/E Prep: An American's Guide to European Data Protection Law and the GDPR | Gordon Yu | Self-published | 2018 | 978-1-717-33308-6 | ↗ |
| CIPP/E Focused Preparation 2022 | Timothy Smit, Gabe Smit | Self-published | 2022 | 979-8-80006-944-0 | ↗ |
| General Data Protection Regulation: A Practical Guide (3rd Ed.) | Casenote | Casenote Publishers | 2024 | 978-1-85398-418-8 | ↗ |
Book selection note: The official IAPP guide "European Data Protection: Law and Practice" is the primary reference, though readers note it does not include amendments made post-2019. Recent third-party guides incorporate updates through 2024, including EU AI Act and NIS2 context.
Typical job titles at Privacy / Legal · Professional
Data Protection Officer · Privacy Counsel · GDPR Compliance Manager · Privacy Analyst · Legal Counsel (Technology) · Privacy Engineer · Compliance Officer · Chief Privacy Officer
(Job titles drawn from current job-board postings that list CIPP/E as required or preferred.)
Salary
| Region | Range | Source |
|---|---|---|
| USD | $100K–$160K | Glassdoor ↗ · PayScale CIPP ↗ · ZipRecruiter ↗ |
| GBP | £50K–£95K | IT Jobs Watch ↗ · Glassdoor UK ↗ |
| EUR | €70K–€112K (Germany/NL/EU avg) | SalaryExpert Germany ↗ · Hays DE ↗ · ERI SalaryExpert ↗ |
| AUD | A$99K–A$160K | Glassdoor AU ↗ · SalaryExpert AU ↗ |
| ZAR | R600K–R1,100K | Glassdoor ZA ↗ · Jobicy ZA ↗ |
Salary note: IAPP data shows certification holders enjoy a 10–15% salary uplift over non-certified privacy professionals. Regional ranges reflect entry-to-mid-career levels; senior DPO and Chief Privacy Officer roles command significantly higher compensation.
Skills validated
Cert-specific technologies, regulations, and competencies tested by this exam.
- GDPR articles and operative clauses (Articles 1–99)
- Standard Contractual Clauses (SCCs) for international transfers
- Data Protection Impact Assessment (DPIA) methodology
- Privacy by Design principles and implementation
- Breach notification procedures and timelines
- ePrivacy Directive compliance (cookies, consent, electronic marketing)
- Data Processing Agreements (DPA) negotiation and terms
- Supervisory authority interaction and enforcement mechanisms
- Member state national implementations of GDPR
- EU AI Act and NIS2 Directive (emerging topics in 2025+ blueprints)
- Privacy policy drafting for GDPR compliance
Related certifications
- Complements: CIPP/US ↗ (same vendor, US-focused; many hold both)
- Prerequisite for: CIPM (Certified Information Privacy Manager) ↗ (advanced professional cert)
- Stacks with: CIPT (Certified Information Privacy Technologist) ↗ (technical privacy skills)
- Equivalents at this level: No direct equivalents; CIPP/E is unique for European GDPR focus
- Vendor overview: IAPP Overview ↗
Sources
- IAPP CIPP/E Certification Page
- CIPP/E Exam — IAPP Store
- IAPP Certification FAQs
- CIPP/E Body of Knowledge 2024–2025
- The PrepCast CIPP/E Exam Simulator
- Whizlabs Practice Exam Simulator
- Pearson VUE IAPP Delivery
- PayScale: CIPP Salary Data
- Glassdoor: DPO/Privacy Officer Salaries (US)
- IT Jobs Watch: DPO Salaries (UK)
- SalaryExpert: Data Privacy Manager (Germany)
- SalaryExpert: Privacy Officer (Australia)
- Jobicy: Data Privacy Officer (South Africa)
Last verified: 2026-05-02
Parent ecosystem: IAPP Privacy Certifications
Parent domain: Privacy / Legal / Compliance
Vendor overview: IAPP Overview