Shows privacy competence to employers
One attorney earned CIPM to show privacy competence after more than 20 years in private practice and moved in-house as planned.

Validates knowledge of running a privacy program, including governance, data assessment, data protection, performance measurement and incident response.
CIPM is IAPP's certification for running a privacy program, covering strategy and governance, assessments, measuring performance, and handling requests and incidents. It focuses on operations rather than one jurisdiction's law, so many people pair it with a CIPP.
One attorney earned CIPM to show privacy competence after more than 20 years in private practice and moved in-house as planned.
A candidate from a tech and operations background noticed that privacy postings accepted CIPP, CIPM or CIPT without preferring one. A reply suggested CIPM fits people without a legal background.
For a consultant moving into information governance, replies described CIPM as widely recognized and flexible, while a dedicated information governance credential would be more targeted.
CIPM runs in two-year terms from the day your certification becomes active.
Relevant credits can count toward all your IAPP certifications. Up to 10 surplus credits earned in the last six months of a term carry over. You can also renew by passing the exam again.
IAPP CPE policy ↗US federal and state privacy law rather than program operations.
GDPR and European data protection law rather than program operations.
AI governance roles rather than a general privacy program.
Broader IT risk and governance for compliance-focused careers.
No. Anyone can buy and sit the exam. After passing, you activate the certification with IAPP membership or the $250 maintenance fee.
90 questions in 2.5 hours, with a 15-minute break halfway. 75 are scored; 15 are unscored trial questions.
The exam costs $550. Non-members also pay a $250 maintenance fee to activate the certification, so the minimum is $800. Members pay $295 a year for membership instead of the fee.
CIPP covers one jurisdiction’s privacy law; CIPM covers running a privacy program anywhere. Many people take a CIPP first, but neither is a prerequisite for the other.
Earn 20 CPE credits every two years and pay the $250 maintenance fee or keep IAPP membership. Relevant credits can count toward your other IAPP certifications too.
Last updated October 2026