CIPP/EIAPP certification

How CIPP/E maintenance works

CPEs are logged in your IAPP account and a sample is audited, so keep documentation. CIPP/E is IAPP's most widely held credential outside the United States, and the GDPR's prominence means qualifying content is abundant.

The maintenance fee keeps the credential active; IAPP membership (bundled for many) unlocks the free European CPE programming below. Verify current fee figures on IAPP's site.

Where European privacy pros find CPEs

IAPP Europe programming is the path of least resistance: IAPP web conferences, the IAPP Europe Data Protection Congress in Brussels, regional KnowledgeNet chapters across European cities, and assessed IAPP publications. Members typically clear 20 CPEs over two years from IAPP content alone.

GDPR-specific qualifying activities are everywhere: European Data Protection Board (EDPB) guideline briefings, supervisory-authority webinars (CNIL, the ICO, the Irish DPC, the BfDI), law-firm GDPR updates, and privacy-tech vendor sessions on transfer mechanisms and DPIAs. Relevance to the privacy profession is the test.

Authoring, teaching, and presenting on European data protection earn CPEs as well, often at higher category rates — check IAPP's current multipliers.

Pairing CIPP/E with CIPP/US or CIPM

CIPP/E is frequently held alongside CIPP/US (for transatlantic privacy roles) or CIPM (privacy program management). IAPP runs its credentials on a combined CPE and maintenance structure, so a second designation doesn't simply double the 20-CPE requirement.

The exact multi-credential math — additional CPEs per extra designation, and how the single maintenance fee scales — is governed by IAPP's current CPE policy. Confirm it in your account, as IAPP has revised the combined rules over time.

For transatlantic practitioners, a single session covering both GDPR and U.S. law can often be logged toward CIPP/E and CIPP/US when it's relevant to each — efficient CPE earning for dual-credential holders.

Common pitfalls (and how to avoid them)

Pitfall 1: Fee-versus-CPE confusion. Paying the IAPP maintenance fee doesn't satisfy the 20 CPEs, and earning CPEs doesn't waive the fee. Both are required within the 2-year term.

Pitfall 2: The 2-year clock. CIPP/E renews every 2 years, shorter than the 3-year ISC2 and CompTIA cycles. 10 CPEs per year is light but easy to defer past the deadline.

Pitfall 3: Undocumented non-IAPP CPEs. Supervisory-authority webinars and vendor sessions count, but IAPP's audit wants proof — save the registration confirmation or certificate when you attend.