Study guide

CIPM study guide

Read a lesson, then practice the ideas you want to remember.

Lessons

  1. Business Model, Operating Environment & Risk
  2. Codes of Conduct, Certifications & Self-Cert
  3. Personal Information Sources, Cross-Border O
  4. Policy Access, Version Control & Role-Releva
  5. Structuring the Privacy Team: DPO, CPO, Repr
  6. Program Scope, Strategy & Governance Model
  7. Applicable Regulations, Oversight Agencies &
  8. Stakeholders, Privacy Team Structure & Commo
  9. Vision, Mission & the Privacy Program Commun
  10. Breach, Complaint, DSR & Retention Plans
  11. Governance Bodies, Program Charter & Escalat
  12. Governing Internal & External Data Sharing a
  13. Privacy Policies & Life-Cycle Processes
  14. Regulatory Change Monitoring & Enforcement S
  15. Retention Schedules & Defensible Disposal
  16. Roles, Responsibilities, Metrics & Continuou
  17. Training & Awareness Activities — Free Study Guide 2026
  18. Mergers, Acquisitions & Divestitures Data Ri
  19. Physical & Environmental Controls in Depth
  20. Technical Controls, Use/Retention Limits & D
  21. Data Discovery, System Integrations & Keepin
  22. Data Inventories, Flows & Life-Cycle Mapping
  23. Policy Compliance Measurement & Gap Analysis
  24. Third-Party Risk Life Cycle & Sub-Processor
  25. Processor/Vendor Evaluation & Physical/Envir
  26. Access Reviews, Monitoring & Enforcing Techn
  27. Organizational Guidelines for Data Use & Sec
  28. Information Security Practices, Data Classif
  29. Privacy-Enhancing Technologies & Technical C
  30. Privacy by Design Principles & the SDLC
  31. Technical, Administrative & Organizational M
  32. Continuous Assessment: PIA, DPIA, TIA, LIA &
  33. Auditing the Privacy Program — Free Study Guide 2026
  34. Privacy Metrics for Program Performance
  35. Risk Mitigation, Post-M&A Assessment & Ethic
  36. Breach Communications to Regulators, Individ
  37. Complaint Handling & Regulator Interaction
  38. Data Subject Access Requests & Consent/Right
  39. Global Privacy Legislation on Data Subject R
  40. Incident Handling, Breach Response & Records
  41. Post-Incident Review & IR Plan Improvement
  42. Privacy Notices & Transparency Obligations
  43. Mixed-Domain Scenarios & Common Exam Traps
  44. Test-Day Logistics, Score Strategy & Credent
  45. The CIPM Body of Knowledge: Six Domains & Ho
  46. CIPM Exam Facts & Format — Free Study Guide 2026
  47. Study Strategy, Timeline & How to Use This G