IAPP Information Privacy Professional/United States Certification

Here is the confusion most privacy professionals face: Both CIPM and CIPP are issued by IAPP. Both cost $550 (or $375 as a second credential). Both have the same exam format — 90 questions, 2.5 hours, 300/500 passing score. From the outside, they look interchangeable. Many candidates pick whichever one appears more familiar in job postings and move on.

That is a mistake. CIPM and CIPP are fundamentally different credentials that map to different career functions, different job titles, and different strengths in the workplace. Choosing the wrong one first can slow your career progression by 1–2 years.

This guide solves the problem. It explains what each credential tests, how they map to specific careers, which pays more, and which to get first for your specific situation.

The Core Distinction: Law vs. Operations

The most important thing to understand about CIPM vs. CIPP:

CIPP (Certified Information Privacy Professional) answers the question: "What does the law require?"

It validates knowledge of privacy laws, regulations, and compliance frameworks in a specific jurisdiction (US, Europe, Canada, Asia, or Government). CIPP professionals understand GDPR, CCPA, HIPAA, COPPA — the regulatory landscape that governs how personal data can be collected, processed, and transferred.

CIPM (Certified Information Privacy Manager) answers the question: "How do we implement that in practice?"