Certified Information Privacy Technologist

Exam format

IAPP logo

Certified Information Privacy Technologist Exam Format

CIPT

Everything the official exam blueprint specifies: question count, time limit, scoring and the weight each domain carries. The Certified Information Privacy Technologist (CIPT) credential validates the ability to implement privacy principles within technical systems and business processes. Unlike legal-centric privacy certifications, the CIPT focuses on the 'how' of privacy. It bridges the gap between legal requirements and technical implementation, ensuring that privacy is not just a policy but a functional component of the technology stack. Candidates must demonstrate proficiency in applying Privacy by Design, managing data lifecycles, and utilizing privacy-enhancing technologies to mitigate risks in modern digital ecosystems, including AI and cloud environments.

90 questions
150 min
75% to pass
6 domains

Exam facts at a glance

The published specifications for this certification.

SpecificationValue
Questions90
Time limit150 minutes (100s per question)
Passing score75% — 300 on a 100-500 scale (IAPP sets the cut score at 300 for all core exams; it does not represent a fixed raw percentage)
Domains6
LevelProfessional
Question bank here90 questions
Published format90 multiple-choice questions; 2.5 hours with a scheduled 15-minute break
SourceOfficial exam specification, published by the vendor

Official domain weights

The percentage of the exam each domain carries. Weight your revision by these numbers, not by what you find hardest.

DomainWeightTopicsPractice Qs
Legal and Regulatory15%
  • Global privacy regulations (GDPR, CCPA/CPRA, etc.)
  • Legal basis for processing
  • Data subject rights implementation
  • +1 more
14
Emerging Technologies15%
  • AI and Machine Learning privacy
  • IoT and edge computing security
  • Cloud computing privacy models
  • +1 more
14
Privacy Program Governance20%
  • Privacy by Design principles
  • Data protection impact assessments (DPIA)
  • Privacy governance frameworks
  • +1 more
18
Privacy Program Management15%
  • Vendor risk management
  • Third-party data transfers
  • Privacy auditing and monitoring
  • +1 more
13
Privacy Program Operations20%
  • Data lifecycle management
  • Privacy engineering workflows
  • Incident response and breach notification
  • +1 more
18
Privacy Program Architecture15%
  • Privacy-enhancing technologies (PETs)
  • Data security controls
  • System architecture and data flows
  • +1 more
13

The heaviest domain is Legal and Regulatory at 15%, and that is where lost points cost you the most. Certilum scores you per domain so you can see the difference between a knowledge gap and a formatting problem.

Note from the vendor record: Credential: Certified Information Privacy Technologist (IAPP). Sources: official store page store.iapp.org/cipt-exam (price, 90 questions, 2.5 hours + 15-minute break, must be completed within one year of purchase), IAPP Certification FAQs (passing score of 300 on the 100-500 scale) and the official IAPP Certification Candidate Handbook (scoring 100-500, pass at 300+). No prerequisite listed on the official store/product pages. Maintenance: 20 CPE credits per two-year certification term plus a USD 250 Certification Maintenance Fee (waived if covered by IAPP membership), per the official IAPP CPE policy. Exam is delivered by Pearson VUE (test center or OnVUE remote). Official exam page

More about the Certified Information Privacy Technologist exam

Explore the rest of this page series: format, cost, difficulty, requirements and how to prepare.

Related certifications

Explore other certifications in the same category and see how they stack up.

Frequently asked questions

Everything you need to know about the Certified Information Privacy Technologist exam.