Three days to get a firm grip on the European data protection framework and pass the IAPP CIPP/E. We work through the GDPR where it matters most, using practical cases drawn from organizations in Europe, North Africa and beyond that handle personal data of people in the EU. Each day ends with exam-style questions and a debrief, so you can measure progress against the official blueprint.
The essentials
Publisher : IAPP
Certification : Certified Information Privacy Professional/Europe (CIPP/E)
Duration : 3 days (21 h)
Level : Intermediate
Formats : Live virtual class · In-person in Casablanca · On-site (intra-company)
Languages : French or English
Exam facts : Multiple choice · scored on a 100–500 scale, pass mark 300 · English, French or German
Exam voucher: included or optional depending on the package — contact us.
Trace the history of European data protection law and the role of EU institutions
Master core GDPR concepts: personal data, processing, controller, processor
Choose and document the right lawful basis for a processing activity
Set up a workable process for data subject requests
Frame transfers of personal data outside the European Economic Area
Assess territorial scope, accountability duties and enforcement consequences
Apply the GDPR to employment, surveillance, direct marketing and online technologies
Program
Introduction to European data protection
Origins and founding texts
EU and Council of Europe institutions
Legislative framework
European data protection law and regulation
Core GDPR concepts
Security of processing
Data subject rights
Data processing in practice
Processing principles
Lawful bases
Information and transparency
International transfers
Scope and accountability
Territorial scope
Accountability requirements (records, DPIA, DPO)
Supervisory authorities and penalties
Compliance scenarios
Employee data
Surveillance
Direct marketing
Internet technologies
Prerequisites
No formal prerequisites for this preparation course
Some exposure to legal, compliance or IT topics makes the course easier
Target audience
Current and aspiring DPOs
In-house lawyers and business attorneys
Compliance and risk managers
CISOs and project managers handling EU residents' data
The exam
The CIPP/E exam is administered by the IAPP. It is made up of multiple-choice questions, some of which are unscored items being trialled for future versions. Results are reported on a 100–500 scale, with 300 required to pass. The exam is offered in English, French and German. After a failed attempt, you cannot book a new appointment sooner than seven days later. The credential stays active as long as you hold IAPP membership or pay the certification maintenance fee, and meet the IAPP's continuing education requirements.
Preparation tips
Read the Body of Knowledge and Exam Blueprint to focus on the heaviest domains
Practice with long scenarios: the exam tests application, not recall
Know the key GDPR recitals and articles well enough to recognize them in a case
Frequently asked questions (FAQ)
Can I take the CIPP/E in French?
Yes. The IAPP offers the exam in English, French and German. We run the course in French or English, whichever suits your team.
What score do I need to pass the CIPP/E?
IAPP exams are scored from 100 to 500 and the pass mark is 300. It is a scaled score, not a straight percentage of correct answers.
Is the CIPP/E useful outside the EU?
Yes. The GDPR reaches many organizations outside the EU when they target or monitor people in Europe. That often includes service centers, IT providers and subsidiaries of European groups in Morocco and elsewhere.
What is the difference between CIPP/E and CIPM?
CIPP/E is about the law: what the GDPR requires. CIPM is about management: how to build and run a privacy program. Many DPOs hold both.
What happens if I fail?
You can rebook with the IAPP, no sooner than seven days after the previous attempt. We help you focus on your weak domains in the meantime.