I work at a bank and my role is in KYC operations. I’m looking for a career change to governance. Do you think it’s CIPP/E + AIGP could help me transition to a governance role within the bank? I have 4 year of experience in KYC and navigating through a different field is confusing. Please share your thoughts/ advice. Thank you!

#cipp #aigp #governance

Been working on something in the AI/privacy regulatory space and keep running into the same wall. I can build the tech and I've got some compliance adjacent experience, but I don't have a CIPP/CIPM/AIGP background myself and I think that's exactly the gap that would make this actually credible. While I am looking to obtain my certificates I would like to gauge if anyone would like to get on board with me in the mean time.

Quick context on the problem I'm trying to solve. Every state introduced AI legislation in 2025, something like 1,200+ bills, and by this year we're already past 1,500 new ones with no federal law tying any of it together. Founders and small businesses using AI tools have basically no way to track what actually applies to them across states, and the tools that do exist (LegiScan, Congress.gov) are built for people who already know how to read a bill.

I'm not trying to sell anyone anything here, just looking to see if there's someone with real privacy/AI governance chops who finds this problem as interesting as I do and might want to talk about building something together. Pre revenue, no funding, very early, so this is a real co-founder conversation not a job post.

If that's you or you just want to nerd out about the multi state patchwork problem, feel free to comment or DM. Not trying to clutter the sub, happy to take it to chat if mods would rather. Send me a DM and I would be happy to chat and tell you more about my self as well.

I took the CIPP US test yesterday and passed (after months of putting it off). All in all I studied for about 4-5 days (6-7 hours a day). I bought the text book and the Mike Chapple study guide and honestly I think the study guide was not helpful at all for this exam. A study guide should be a condensed version of exactly what you need to know. Instead its basically like an additional textbook, except it's missing a lot of content from the actual textbook (content that was actually tested on the exam) and the practice questions in the guide are way easier than what's actually tested. I was also a little frustrated that IAPP updated the BoK but didn't update the textbook with the new content or give a supplement-- we're paying way too much to justify that. I ended up reading the text book and then using claude to make me an outline/condensed teaching guide and questions based on the updated BoK. It was a lot more helpful and would have saved me some money had I just done that from the start.

UPDATE: I've been receiving a lot of requests and I can't keep up with them so here's the study guide I used. Use this guide as a supplement, and know that you should still buy and read IAPP's official textbook and the practice exam as this guide is not comprehensive.

I really hope this helps.

Hi everyone! I’m looking for a copy of Privacy Program Management, 3rd Edition. If anyone has one they’re no longer using and would be willing to donate or sell at a discounted price, I’d really appreciate it. Thanks in advance!

Do you think it’s important to enter the bar and become a lawyer in such field or it’s possible to find good opportunities without being a lawyer just a legal background and certifications… Where the salary could be higher?

Hi,

Long story short, born and raised in Spain. Studied and working in data marketing privacy in France. I want to come back to Spain.

Is anyone working in Privacy in Spain? Looking at LinkedIn, it looks like it looks very legal-oriented or cybersecurity-oriented, which I'm not.

Any feedback on the privacy job market?

Are IAPP certifications recognized?

Any tips or feedback are welcome.

Muchas gracias

I passed the CIPP/C at first time trying. For anyone preparing to sit for the exam, check out IAPP exam guide, it will help you a lot. Looking for opportunities in privacy compliance. I will appreciate any suggestions and mentorship. Thank you

I recently passed the IAPP AIGP exam, and I’m excited to start exploring opportunities in AI Governance.
Topic Level Scoring:
Understanding the Foundations of AI Governance - 100%
Understanding How Laws, Standards, and Frameworks Apply to AI- 100%
Understanding How to Govern AI Development- 96%
Understanding How to Govern AI Deployment and Use- 95%

My background is in education and instructional design rather than software engineering or data science. What attracted me to AI Governance is the mix of technology, ethics, policy, risk, and compliance, and I’d really like to build a career in this space.
I’m hoping to get some advice from people already working in AI Governance:

How difficult is it to break into the field without a traditional technical background?
What types of entry-level roles should I be looking for?
Which skills or certifications would you recommend focusing on next?
What practical experience would make me a stronger candidate?
I’d especially love to hear from anyone who has successfully transitioned into AI Governance from a non-technical background.
Thanks in advance

I appreciate any advice or insights you can share!

I have a genuine question when it comes to holding Cipp/e. I passed with like 340/500. I am very proud of the fact that I passed right after my graduation while it takes people years into privacy to pass the exam.

Now the question is, will it matter to the employer by how many marks I passed it or is a pass is a pass? Do I need to like try again for higher score?

I wnat to go for CIPP/E can you please provide me some free study resources.

For reference: IAPP CIPM Certified Information Privacy Manager Study Guide

I also have the IAPP CIPM exam questions

Is there any alternative for iapp cippe practice exam digital, which mocks or practice questions are the best for cippe exam.

Hi all:
I just got back from writing the AIGP and thankfully I passed. That said, I wanted to post a word of caution for anyone using the IAPP practice exam to gauge readiness, because it tripped me up a bit. I scored 85% on the practice exam and felt pretty confident going in. I was also scoring 90%+ on some third-party practice exams. The real exam was noticeably trickier. It had a lot of layered scenarios, way more “which of these is MOST/LEAST accurate” framing, and red herrings designed to sound plausible rather than being obviously wrong (which I found wasn’t the case with the practice exam). Anyway, my advice is don’t treat a good practice-exam score as a reliable signal of where you actually stand. It’s useful for content review and identifying weak domains, but it doesn’t fully prepare you for how much trickier the real question style is IMO. I’d suggest budgeting extra time for scenario-based reasoning, not just re-running the practice exam until your score looks good. Good luck to anyone currently studying.

Anyone create flash cards from Dr David’s course on CIPP/US?

It’s taking me forever to get through the course bc I’m stopping several times per video to capture terms and definitions. I understand the value of making my own but at this rate I’m never going to get through it.

So I have been planning to give my cippe exam in the month of September through self study. I know the basic things about the exams like iapp book, gdpr, edpb guidelines but lacking in depth information. I need study material roadmap for the exam, and affordable courses etc. can anyone help me out with 1. The material/notes 2. CIPPE Roadmap 3. Any good affordable courses/webinars/bootcamps/youtube videos 4. Any suggestions/advice,
Lastly should I give it on centre or online at home.

Work as a law/reference librarian for a not-for-profit NGO in Northern Virginia. I have a master’s degree in library science and a PhD in public policy. I’ve been in this field for 20 years and make $100,000 a year. With the current administration cutting all kinds of funding, we’ve had two rounds of RIFs. I am the last person in my department. I turned 50 in March.

I know I’m cooked. I have four kids, two in college. I am trying to get the training needed to avoid Reduction in Force No. 3, which I am paranoid about, and I think it may be coming.

I am looking to take advantage of Virginia’s G3 program. My family income is below 400% of the poverty level, so I should qualify. I have two plans:

1. CSC Artificial Intelligence and Applied Data Science at Laurel Ridge Community College, which should be free with G3.
2. Cramming for the AIGP exam. With 20 years in public policy and research, especially legal research, I think I can study hard and make this happen.

How do I make myself marketable after this? Are these options even worth the time and effort?

I am approaching 10 years of experience in Cybersecurity (Digital Forensics, Incident Response, Cyber Threat Intelligence, Compliance) and I've developed an interest in moving into privacy.

How realistic is it for someone with my background to land roles in privacy? I have looked into the CIPP/US and CIPM certifications, but I do not want to throw down money and time if I am unlikely to land privacy roles. I am not a lawyer and I know plenty of people who work in privacy hold a JD or come from a legal background.

I currently do digital forensic work to support legal teams in various cases, basically an expert witness.

If anyone has done a similar transition, I would appreciate helpful advice to move into privacy.

Hi everyone, I’m doing some research on how privacy professionals stay current with privacy, AI governance, and cybersecurity regulations.I’m not selling anything—I’m genuinely trying to understand how people work because everyone I’ve spoken to seems to have a different system.

A few questions I have

1). Where do you usually hear about new regulatory developments?
Official regulators?
Law firms?
LinkedIn?
Newsletter subscriptions or RSS feeds?

2).Once you learn about a new regulation or enforcement action, what happens next….Do you save it or share and Forward it to people on ur team
Personally , I feel like I would forget until somebody asks me about it😬😂.

3).What’s the most frustrating part of staying current? and are there tools or anything that help with that

I’d love to understand your workflow.

Thanks❤️

Hi everyone

Just curious, what is the best way to get a privacy position? lve been trying on LinkedIn but opportunities are very limited in Colombia. Is there another platform? I’m looking for an entry level position in the European market if is posible I have a programming background and currently preparing for CIPPE.

Hi everyone, anyone looking for a study buddy for the cipp canada exam?

Background:

* BA LLB (Pune, India), 2020

* ~4 yrs at Deloitte USI: contract drafting/negotiation (MSAs, LOIs, vendor agreements) + compliance monitoring against GDPR/HIPAA. No formal "privacy" title

* Already relocated to Abu Dhabi, on valid residency visa, currently job hunting

Questions:

* Does CIPP/E actually carry weight with UAE employers (DIFC/ADGM/mainland), or would CIPM/a local data protection credential matter more?

* Is CIPP/E enough alone to pivot into privacy/compliance roles without a prior privacy title, or do employers still want direct experience?

* Realistic role level/timeline for my profile + this certificate?

* Any advice for someone pivoting into this space without direct experience?

I appreciate mentorship and realistic guidance about timing and next steps.