Skip to main content

Lesson 01 of 25

Welcome: How to Pass the CIPP/E with AMLReady

5 min read · CIPP/E

Meet your independent, public-source study aid for the IAPP CIPP/E exam. Learn the exam format, the five official domains and their weightings, and the learn–test–review loop that turns hours of study into points on exam day.

Why European privacy law matters now

  • GDPR fines can reach 20 million euros or 4% of global turnover
  • Any company touching EU residents' data is in scope
  • Privacy professionals are the people who keep it lawful
  • The CIPP/E proves you can do that work

Here is a number that gets a board's attention. Under Article 83 of the General Data Protection Regulation, a single serious violation can cost a company up to twenty million euros, or four percent of its total worldwide annual turnover, whichever is higher. That rule reaches almost any organisation on earth that handles the personal data of people in the European Union.

The professionals who keep that data lawful, who advise the business, run the assessments, and answer to regulators, are information privacy professionals. The Certified Information Privacy Professional for Europe, the CIPP/E, is the credential that proves you can do that work. Over the next few hours, AMLReady is going to get you ready for that exam.

Who this course is for

  • Compliance and legal professionals adding privacy
  • Career-changers entering data protection
  • Anyone whose employer wants the CIPP/E credential
  • No law degree required — a plan and a few hours a week

Welcome to AMLReady. We are glad you are here. AMLReady began in anti-money-laundering and financial-crime training, and we have brought the same independent, public-source, exam-focused method to European privacy law.

This course exists for one purpose: to help you prepare for the CIPP/E exam with a clear, structured curriculum built from public legal sources. So who is this for? Maybe you are a compliance or legal professional adding privacy to your toolkit.

Maybe you are a career-changer breaking into data protection. Maybe your employer has simply told you this credential will open doors. Wherever you start, you do not need a law degree.

You need curiosity, a study plan, and a few hours a week. We will bring the structure.

The exam and the five domains

  • 90 questions: 75 scored, 15 unscored pilot
  • Domain I — Introduction to European Data Protection
  • Domain II — Data Protection Law and Regulation (heaviest)
  • Domain III — European Data Processing
  • Domain IV — Scope and Accountability; Domain V — Compliance

Let's look at what you are walking into. The CIPP/E is ninety multiple-choice questions. Seventy-five of them count toward your score, and fifteen are unscored pilot questions the IAPP is testing for future exams, so you will not know which is which; answer every one.

The official Body of Knowledge, version one point three point three, organises the material into five domains. Domain one is the introduction to European data protection, the history and the institutions. Domain two, the heaviest, is European data protection law and regulation, the core GDPR concepts, security, and data subject rights.

Domain three is European data processing, the lawful bases and international transfers. Domain four is scope and accountability, who is covered and who answers for it. And domain five is compliance, applying all of it to the workplace, surveillance, marketing, and technology.

We will travel these five domains in order.

How to study: learn, test, review

  • Each lecture is short — six to eight minutes over clear slides
  • Watch actively — pause on each new Article number
  • After each domain, take the free AMLReady practice test
  • Miss one? Return to the lecture. Learn, test, review.

Here is how we want you to use this. Each lecture is short, six to eight minutes, narrated over clear slides. Watch actively.

The GDPR is a numbered regulation, so when we say a rule comes from Article 6, or Article 17, pause and note the number, because the exam rewards knowing where a rule lives. But watching alone will not get you there. You have to practise.

After you finish a domain's lectures, go take the free AMLReady practice test for that domain. The questions are original, written to exam style, designed to train your reasoning, not to memorise answers. When you miss one, come straight back to the lecture.

That loop, learn, test, review, is the single most effective way to study for this exam.

An independent, public-source study aid

  • Not affiliated with, authorized by, or endorsed by the IAPP
  • CIPP, CIPP/E and IAPP are trademarks of the IAPP
  • Built only from public law — GDPR, EU directives, CJEU cases, EDPB
  • No real exam questions; no pass guarantee — serious preparation

Now one important thing, said plainly. AMLReady is an independent study aid. CIPP, CIPP/E, and IAPP are trademarks of the International Association of Privacy Professionals.

This course is not affiliated with, authorized by, or endorsed by the IAPP. We do not reproduce their study materials or any real exam questions. Instead, everything here is built from public legal sources: the General Data Protection Regulation, Regulation (EU) 2016/679, the EU directives, the judgments of the Court of Justice of the European Union, and the guidelines of the European Data Protection Board.

When we state a rule, we name its source so you can verify it yourself. And we will not promise that you will pass; no honest course can. What we promise is serious, structured preparation that gives you every advantage.

Recap and what's next

  • You know the exam shape and the five domains
  • You know the learn–test–review loop
  • You know this is an independent, public-source aid
  • Next: where European data protection came from

So here is where we are. You know the shape of the exam, ninety questions across five domains, and you know which domain carries the most weight. You know the learn, test, review loop that makes this work, and you know this is an independent, public-source study aid, not an IAPP product.

Next, we go back to the beginning, to the human-rights ideas and the early treaties that made Europe protect personal data more fiercely than almost anywhere else on earth. Understanding where this law came from will make every Article you learn afterward click into place. Let's go.

Sources

  • IAPP CIPP/E Body of Knowledge and Exam Blueprint V1.3.3 (effective 1 Sept 2025)
  • Regulation (EU) 2016/679 (GDPR)
  • iapp.org/certify/cippe

Test your knowledge

A few CIPP/E questions on this material — pick an answer to see the explanation.

  1. Q1. Which instrument was the first binding international treaty specifically addressing the protection of individuals with regard to automatic processing of personal data?

  2. Q2. A key reason the EU replaced Directive 95/46/EC with the GDPR was that the Directive produced inconsistent rules across the Union. Which feature of the GDPR most directly addresses that problem?

  3. Q3. A retailer collects customers' dates of birth at checkout even though age is irrelevant to fulfilling any order. Which Article 5 principle is most directly breached?

  4. Q4. An organisation has strong privacy practices in place but keeps no records, policies, or logs and cannot show a regulator how it complies. Under the GDPR, how is this best characterised?

Ready to practice?

Put this lesson to work on real CIPP/E questions.

Drill the full CIPP/E bank →