Here is the confusion most privacy professionals face: Both CIPM and CIPP are issued by IAPP. Both cost $550 (or $375 as a second credential). Both have the same exam format — 90 questions, 2.5 hours, 300/500 passing score. From the outside, they look interchangeable. Many candidates pick whichever one appears more familiar in job postings and move on.
That is a mistake. CIPM and CIPP are fundamentally different credentials that map to different career functions, different job titles, and different strengths in the workplace. Choosing the wrong one first can slow your career progression by 1–2 years.
This guide solves the problem. It explains what each credential tests, how they map to specific careers, which pays more, and which to get first for your specific situation.
The Core Distinction: Law vs. Operations
The most important thing to understand about CIPM vs. CIPP:
CIPP (Certified Information Privacy Professional) answers the question: "What does the law require?"
It validates knowledge of privacy laws, regulations, and compliance frameworks in a specific jurisdiction (US, Europe, Canada, Asia, or Government). CIPP professionals understand GDPR, CCPA, HIPAA, COPPA — the regulatory landscape that governs how personal data can be collected, processed, and transferred.
CIPM (Certified Information Privacy Manager) answers the question: "How do we implement that in practice?"
Use this quick start guide to collect all the information about IAPP CIPP-US Certification exam. This study guide provides a list of objectives and resources that will help you prepare for items on the IAPP Certified Information Privacy Professional/United States (CIPP-US) exam. The Sample Questions will help you identify the type and difficulty level of the questions and the Practice Exams will make you familiar with the format and environment of an exam. You should refer this guide carefully before attempting your actual IAPP Certified Information Privacy Professional/United States (CIPP-US) certification exam.
