Hey guys, Passed my ISACA AAIR exam this morning! It was pretty intense on the threat modelling and model drift side but I'm excited to have it out of the way.
My next target is lAPP AIGP. My brain is already in "study mode" so I want to keep the momentum going and dive right in.

For those of you who've done both (or just the AIGP):

How much does the AAIR IT risk knowledge transfer to the AGP privacy and governance focus?

work full time but can provide around 2-3 hours a day. Can we get through the APP syllabus and the EU Al Act frameworks in 4 weeks?

What are the best practice exams available right now? I find I learn best by asking questions based on scenarios.

Thanks for the advice in advance!

Good day all,
I hope this is the right space where to ask for advice on which certification to get.

Context:

I currently work in AI governance for a fintech, with over 4 years of experience in guiding organisations in severely regulated spaces deal with digital regulation (GDPR, AI Act, mostly). I also have an LLM with a focus on privacy law.

Question:

My current employee is willing to pay for me to get certified, this year in privacy and next year in AI. For which option should I go? Cipp/e or Maastricht ecpc-b DPO?

Hi! I would like to share one of the great news that happened to me. I just passed the CIPP/E exam

I hope this post would help those who will be taking the exam in the future.

For context, I bought the exam at the end of April. During the first week after buying the exam, I was able to finish 60 pages of Ustaran book. However, due to work and looking for other opportunities, I was not able to continue studying. I was postponing it since I was not in the proper headspace.

But then, around end of July, I decided to book my exam date to force myself to commit to it, afterwards, I was able to finish first reading by first week of august. Then I do a second reading of the book before taking the exam.

I would say, for those who are generally new to data privacy like me, the youtube videos providing summary of each articles were helpful. Another tip would be answering sample questions on the internet, then determine your weakness points. ChatGPT is also a nice companion to ask for topics you are confused about. Reading the GDPR itself is also a must.

Generally I would say that the exam was difficult, and thought I would fail. Anyway, goodluck to future takers!

For those who hold both certs, which exam did you find most difficult?

I obtained my CIPP/US last year, and I’m planning to take the AIGP by the end of this year. I’m trying to gauge how difficult the AIGP is in relation to the CIPP/US, and determine whether I’ll need to set aside a lot more (or less) time to prepare for it.

TIA!

I just passed the IAPP AIGP barely. My score was 30x/500. Mine is probably not a good preparation model to follow, but it might give people an idea of what the bare minimum can look like.

For info, AIGP is the first IAPP certification exam I take.

My preparation

Due to some disastrous time management, I only seriously studied for about one week before the exam, roughly 3–5 hours per day.

In hindsight, I would probably want to double that effort to feel reasonably confident about getting a safe pass.

My main resource was Dr. David Kyle’s AIGP course.

What I managed to complete:

• All lecture videos, mostly at 2.0x speed
• About 30% of the flashcards
• 2 of the four available mock exams provided by course.
• My mock scores 8x% range to 9x%

That last part gave me a false sense of security.

Despite doing very well on my final mock, my actual AIGP score was only 30x/500 — a very narrow pass.

The real exam was MUCH harder than the practice questions

It's not a surprise, but the actual exam felt considerably more difficult than any of the practice tests I did.

Process of elimination is extremely important when doing multiple choices questions.

I also thought a number of questions were poorly or ambiguously framed. There were probably at least 10 where I felt important facts and info were missing.

My basic approach was:

Learn → Quiz → Review mistakes → Quiz again → Review again

I strongly believe that you learn this material by repeatedly testing yourself rather than just rereading notes.

Unfortunately, there does not seem to be a huge bank of high-quality AIGP MCQs available. If I could go back, I would definitely complete every mock exam available to me.

Another thing I didn't have enough time to do: read the major legislation/frameworks themselves at least once.

Dr. David Kyle's course was extremely helpful, but I would describe it like this:

The course gives you the skeleton, the structure, and the door into the subject. You still benefit enormously from opening that door and reading some of the original materials yourself.

For things like the EU AI Act, GDPR-related concepts, NIST AI RMF, OECD principles, etc., I think reading the relevant original text/framework at least once would have helped me internalize the distinctions rather than just remember what the slide deck said.

Memorization absolutely matters. There are terms, frameworks, roles, lifecycle stages, regulatory distinctions, etc. that you simply need to know.

But one thing I wish I had spent much more time doing was connecting the dots.

The hard part was not knowing individual definitions, but understanding:

• how concepts relate to each other;
• which governance controls apply at different lifecycle stages;
• how laws, standards and voluntary frameworks interact;

Final thoughts

If you have enough time, don't study the way I did. One week at 3–5 hours/day was enough for me to scrape through, but based on how close my score was, I wouldn't consider it a safe strategy at all.

And don't get overconfident because you're scoring 80–90% on practice exams. The real exam humbled me very quickly.

Good luck to everyone preparing!

I’m a law graduate and my long-term goal is to work in AI Governance. I’m considering getting CIPP/E and starting in Privacy/Privacy Consulting to build practical experience, then eventually transitioning into AI Governance.

I’d really love to hear from people actually working in these fields, especially hiring managers: what would make you consider someone for an entry-level Privacy or AI Governance role? What would you want to see on their CV? And would CIPP/E + real privacy experience be a strong foundation for eventually moving into AI Governance?

I downloaded the current CIPP/US BOK and it is from 2025. I plan to take the exam in the next two months. Should I be concerned about a new BOK dropping and altering what is tested?

Hi everyone - I'm really concerned that IAPP released the fifth edition privacy textbook without notifying people who previously bought their study materials. I have been studying off of the fourth edition copy and my exam is before September 1, 2026. Why would they not notify us if we bought the old textbook?

Does anyone know when the fifth edition textbook goes into effect as an exam? Shouldn't they be telling people who are prepping about when they need to buy the new edition?

I saw a few comments saying it should be in effect in September, but nothing on the official IAPP website. Any insight into this would be really appreciated.

Am I likely to pass the IAPP AIGP certification exam?

Experienced lawyer based in Ireland, trying to return from a significant career break. Impossible to break into in house privacy roles, even at entry level, even with a cipp. What to do?

Passed the exam after 6 mths preparation in slow mode. Use material from Udemy only

As the header says, I’m a rising 2L in the U.S. and I passed the CIPPUS today. I have a 2L summer job lined up with a big firm and I was recruited for my background in cyber/software engineering before law school. I am looking to grab the next cert, I eventually want to take the CISSP but want to have a few more years of work under my belt before tackling that. It seems like the CIPT is the next exam I should shoot for. How was studying for that compared to the CIPPUS? Did those of you with a technical background find the CIPT any easier?

Hey everyone,

Looking for a quick reality check. I am a Canadian citizen with a BA in Philosophy (strong background in logical reasoning and reading comprehension) but zero corporate or privacy experience. I am a native English speaker.

I am planning to self-study and pass the CIPP/E to bypass HR filters. My goal is to use a Working Holiday Visa to move and start at the bottom in a junior role (Privacy Analyst, Junior Compliance) in multinational hubs in Poland or Germany where the business language is English.

Realistically, does a BA + CIPP/E combo actually get you interviews for entry-level roles over there right now, or is it too competitive even at the bottom?Be as blunt as possible.

Thanks!

Hey Community,

I‘ve already bagged my CISSP and GSEC, and now I'm heading into the AIGP cert.

I’d like to ask if anyone has experience with the official online training from the IAPP? Also, which additional study materials would you recommend to feel fully prepared?

Looking forward to your comments!

I want extra practice, been using CHAT GPT trained on the IAPP BOK, DR Kyle lecture materials, the practice exam fro IAPP itself to generate questions and help me study but wondering if theres other options that people also recommend?

Hi everyone,

I'm looking to form a small, disciplined CIPP/E study group for the Nov–Dec 2026 exam.

• Weekly sessions on Microsoft Teams
• I'll explain topics and we'll discuss them together
• Looking for members who will actively contribute through discussions, notes, questions, or resources

No free riders—everyone should contribute and stay committed.

If you're interested, DM me with your current preparation level and how you'd like to contribute.

Hello guys,

Are there any materials related to CIPM is good in udemy ?

I prefer udemy to learn.
And do the course by edcorner learning is enough ? Along with the practice exams as well

And whats the difficulty of the exam compared to cisa, cism or crisc or pmp ?

Thanks in advance

CIPP/US has intimidating style of questions and choices, is there a udemy course practice questions with the same style?
I took it a month ago and failed at 274 score. I studied and focused on my weak points. The thing is after the exam I wrote down the questions I remembered and they are still not easy.
Do you recommend I delay retaking it or just go.

Hi everyone,I am currently preparing for my CIPP/E exam and I am looking to buy the official textbook: "European Data Protection: Law and Practice" (Third Edition / Version 3) curatored by Eduardo Ustaran.If you recently passed your exam in 2026 and have a physical copy taking up space on your desk, I would be more than happy to buy it from you!Location: I am based in Italy (Milan), so I am looking for sellers within Europe to keep shipping fast and reasonable.Payment: Willing to pay via PayPal (Goods & Services for safety) or Revolut.Extras: If you have personal notes, summaries, or flashcards from your 2026 preparation, I’m open to buying those as a bundle too.Please send me a DM with your price including shipping.Thanks and congrats to everyone who recently passed!

Looking for advice, tips....validation?

As a background, I currently work in healthcare administration as a provider analyst. Essentially I am essentially an extension of the RCM department for providers who have contracts with us. Been in RCM related positions in healthcare for 16 years.

I have been interested in switching career paths for a minute and about ready to jump into something new, but staying in the healthcare field. I have been turning over the privacy route in my head for a couple years now.

I would love to get the take from those who are in the field and industry about what really matters, how I might pivot into this field and career ladders I should consider.

My goals aren't necessarily into people managing, but more individual contributor roles. However, I have managed people and not against it, per se.

I am looking for growth opportunities and pay scale step ups and I thought the path for certification in the title might lead to those roles.

Any resource recommendations beyond the obvious (IAPP, this Reddit sub, and maybe HIPAA Journal) would be great.

Just overall outlook assessment of the field and AI in the healthcare arena would be excellent.

Thanks in advance for anything you have to offer.