How many questions are on the Certified Information Privacy Manager exam?

The Certified Information Privacy Manager exam has 90 questions, and the vendor's published description is: 90 multiple-choice questions; allotted time 2.5 hours with a 15-minute break.

How long do you have to complete the Certified Information Privacy Manager exam?

You get 150 minutes, which is about 100 seconds per question. The published format is: 90 multiple-choice questions; allotted time 2.5 hours with a 15-minute break.

What score do you need to pass the Certified Information Privacy Manager exam?

The passing score is 70% (300 (on a scale of 100 to 500)).

How should I use the domain weights when revising?

Weight by percentage, not by domain. 2% is the one where lost points cost you the most, and Certilum scores you per domain so you can see exactly where that is.

Does Certilum have practice questions for the Certified Information Privacy Manager exam?

Yes: 90 questions in our bank for this certification, each tagged to the exam domain it belongs to, with the official domain weights applied.

Exam format

Certified Information Privacy Manager Exam Format

CIPM

Everything the official exam blueprint specifies: question count, time limit, scoring and the weight each domain carries. The Certified Information Privacy Manager (CIPM) credential, offered by the IAPP, is the industry-leading certification for professionals tasked with the operational management of privacy programs. Unlike the CIPP, which focuses on legal knowledge and regulatory frameworks, the CIPM focuses on the 'how' of privacy. It validates a candidate's ability to design, implement, and manage a privacy program that is effective, scalable, and compliant with global laws. The exam tests the practical application of privacy principles, covering everything from governance structures and lifecycle management to incident response and vendor oversight. It is designed for those who need to turn legal requirements into actionable organizational processes.

90 questions

150 min

70% to pass

6 domains

certilum

Exam facts at a glance

The published specifications for this certification.

Specification	Value
Questions	90
Time limit	150 minutes (100s per question)
Passing score	70% — 300 (on a scale of 100 to 500)
Domains	6
Level	Professional
Question bank here	90 questions
Published format	90 multiple-choice questions; allotted time 2.5 hours with a 15-minute break
Source	Official exam specification, published by the vendor

Official domain weights

The percentage of the exam each domain carries. Weight your revision by these numbers, not by what you find hardest.

Domain	Weight	Topics	Practice Qs
Emerging Privacy Issues	2%	AI and machine learning implications New regulatory technologies Evolving global privacy trends	2
Privacy Program Lifecycle	30%	Privacy by Design implementation Data lifecycle management Conducting Privacy Impact Assessments (PIA/DPIA) +2 more	27
Privacy Program Governance	40%	Establishing privacy governance frameworks Defining roles and responsibilities Developing privacy policies and procedures +2 more	36
Privacy Program Operations	20%	Managing data subject requests (DSAR) Incident response and breach management Vendor management and third-party risk +1 more	18
Privacy Program Communication	3%	Internal stakeholder engagement External communication strategies Transparency and notice	3
Privacy Program Metrics & Reporting	5%	Defining Key Performance Indicators (KPIs) Reporting to senior management Measuring program effectiveness	4

The heaviest domain is Emerging Privacy Issues at 2%, and that is where lost points cost you the most. Certilum scores you per domain so you can see the difference between a knowledge gap and a formatting problem.

Note from the vendor record: CIPM (Certified Information Privacy Manager) is an ANSI-accredited IAPP credential; scores are converted to a 100–500 scale and the cut score is set at 300. The exam must be completed within one year of purchase, and roughly 10%–15% of exam content changes during IAPP's annual updates. Passing alone does not activate the credential: holders must meet the minimum CPE requirements and either pay a Certification Maintenance Fee of USD250 per two-year certification term or hold IAPP membership at USD295 annually (IAPP FAQ), with 20 CPE credits required per certification per two-year term under the official CPE policy. Prices and requirements verified against iapp.org and store.iapp.org. Official exam page

More about the Certified Information Privacy Manager exam

Explore the rest of this page series: format, cost, difficulty, requirements and how to prepare.

Exam costPrice, retakes and total budget Pass rateThe score you need Who can take itRequirements and prerequisites Study planHow to prepare, by domain

Related certifications

Explore other certifications in the same category and see how they stack up.

Certified Information Privacy Professional/US

IAPP

Certified Information Privacy Technologist

IAPP

Certified Threat Intelligence Manager

Frequently asked questions

Everything you need to know about the Certified Information Privacy Manager exam.

There are 6 domains: Emerging Privacy Issues, Privacy Program Lifecycle, Privacy Program Governance, Privacy Program Operations, Privacy Program Communication, Privacy Program Metrics & Reporting. The official weights are Emerging Privacy Issues 2%, Privacy Program Lifecycle 30%, Privacy Program Governance 40%, Privacy Program Operations 20%, Privacy Program Communication 3%, Privacy Program Metrics & Reporting 5%.