Ultimate AIGP Study Guide 2026
The AIGP exam changed again in February 2026, and most of the study advice circulating online has not caught up. This AIGP study guide gives you a practical, opinionated roadmap for passing the Artificial Intelligence Governance Professional certification on your first attempt. It is not a list of links. It is a plan built from real candidate experience across our study groups, sharpened by what the updated Body of Knowledge actually tests.
Whether you are six months out or six weeks away, this AIGP study guide will help you allocate your time, choose resources that earn their cost, avoid the traps that catch otherwise well-prepared candidates and walk into the exam with a clear head. Privacy Study Group is not affiliated with or endorsed by the IAPP; this guide reflects the collective experience of thousands of candidates who have prepared, sat and passed the exam.
What Is the AIGP?
The AIGP is the International Association of Privacy Professionals’ certification for professionals who govern the responsible development, deployment and use of AI systems. Launched in April 2024, it sits alongside the IAPP’s established privacy credentials (CIPP/E, CIPP/US, CIPM, CIPT) but occupies distinct territory: AI governance as a professional discipline, not a privacy add-on.
The certification validates your ability to design, implement and oversee AI governance programmes across the full lifecycle of AI systems. That includes risk assessment, regulatory compliance, ethical considerations, documentation and continuous monitoring. It is a broad credential by design; AI governance sits at the intersection of law, technology, ethics and organisational risk.
There are no formal prerequisites. No specific degree, no minimum years of experience. The exam is available in English, delivered online via Pearson VUE or at a physical test centre, and you receive your result immediately upon finishing.
AIGP Exam Format and Fees
The exam consists of 100 multiple-choice questions. You have 2 hours and 45 minutes (165 minutes), including an optional 15-minute break at the halfway point. If you take the break, you must submit the first half of your exam and cannot revisit those questions when you return. Of the 100 questions, 85 are scored; the remaining 15 are unscored pilot questions being tested for future exams. You will not know which are which, so treat every question seriously.
Approximately 30% of questions are scenario-based, presenting real-world AI governance challenges. These are the questions that separate candidates who understand the material from those who have merely memorised it. The pass mark is 300 on a scaled score of 100–500.
What the AIGP Costs
The exam fee is $799 for non-members or $649 for IAPP members. IAPP membership costs $295 per year and includes a waiver of the biennial $250 Certification Maintenance Fee, so joining before you sit the exam is usually the sensible financial decision. If you need to retake, the fee is $475 for IAPP members and $625 for non-members. You must schedule and take the exam within 12 months of purchase.
Beyond the exam fee, budget for study materials. The range is wide: candidates who self-study using free resources and a single practice exam spend under $100 on materials, while those who invest in a comprehensive preparation programme may spend $200–$500. Official IAPP training courses run from around $995 (self-paced online) to over €2,000 for in-person classroom sessions. Your total investment depends on your background and how much structure you need.
The 2026 Body of Knowledge
The IAPP publishes a Body of Knowledge (BoK) for each certification. The BoK defines every domain and topic candidates are tested on; think of it as the exam’s table of contents. If you have not seen a BoK before, it is essentially a structured list of competencies and performance indicators that tell you what you need to know and, just as importantly, to what depth. The verbs in each performance indicator (identify, evaluate, implement, apply) signal the cognitive level the exam targets, following Bloom’s Taxonomy.
The AIGP BoK was restructured from seven domains to four in February 2025, and updated to version 2.1 on 2 February 2026. If your study materials do not reference v2.1, you are preparing for the wrong exam. The current BoK is a free download from iapp.org.
The four domains and their approximate question weightings are:
| Domain | Focus | Questions (min–max) |
| I. Foundations of AI Governance | What AI is, why it needs governance, responsible AI principles, building a governance programme | 16–20 |
| II. Laws, Standards and Frameworks | EU AI Act, NIST AI RMF, ISO/IEC 42001, GDPR intersections, global AI legislation | 21–25 |
| III. Governing AI Development | Design, data governance, training, testing, release, monitoring and documentation | 21–25 |
| IV. Governing AI Deployment and Use | Deployment decisions, vendor assessment, continuous monitoring, incident management, deactivation | 21–25 |
The 2026 update is a recalibration, not an overhaul. The IAPP typically states that annual updates introduce no more than 10–15% new content. The most significant shift is terminological: “AI models” has been replaced by “AI systems” throughout, reflecting the reality that governance responsibilities extend beyond the model itself to the entire system, its supply chain and its downstream uses. New performance indicators around agentic architectures, third-party risk management and strengthened data governance have been added.
Download the current BoK from iapp.org. Print it. Keep it next to your desk throughout your preparation. It is the single most valuable free resource available, and this AIGP study guide is built around it.
How Long Should You Study?
There is no honest universal answer; it depends on your background. Candidates with existing privacy certifications (CIPP/E, CIPM) and professional AI exposure typically report 40–60 hours of study over 6–8 weeks. Candidates entering from a non-privacy background, or those with limited AI experience, report 80–120 hours over 10–12 weeks. The IAPP suggests 30 hours, but that figure is optimistic for most candidates based on the feedback we see in the study groups.
A useful starting point is the free AIGP assessment at 22academy.com. It takes about 15 minutes, identifies your strongest and weakest domains and helps you decide whether you need a full study programme or targeted reinforcement. Starting with a diagnostic saves weeks of studying material you already know.
Schedule the Exam Early
This is the single most repeated piece of advice across our study groups: book your exam date before you feel ready. A fixed deadline concentrates effort. Without one, preparation expands indefinitely; there is always one more article to read, one more topic to review.
You can reschedule up to 48 hours before a test-centre appointment or up to 15 minutes past the start time for an online session. There is no penalty for rescheduling, and you can do it as often as you like within the 12-month window. The flexibility removes the risk; the deadline adds the urgency.
What to Study: a Practical AIGP Study Guide Framework
Start with the BoK, Not a Textbook
There is no official IAPP textbook for the AIGP. This is different from the CIPP/E, where Ustaran’s European Data Protection is the canonical text. For the AIGP, the BoK itself is your curriculum. Read every performance indicator. For each one, ask yourself: could I explain this to a colleague? Could I apply it in a scenario question? If not, that indicator is where your study time goes.
Work through the BoK domain by domain. For each competency, identify whether you need to learn the concept from scratch, refresh your understanding or simply confirm you already know it. This triage prevents the common mistake of spending equal time on everything; your study plan should be weighted towards your weakest areas, not spread evenly.
Know the Frameworks Cold
Three frameworks appear repeatedly across all four domains and are tested both conceptually and in applied scenarios. If you know nothing else well, know these:
The EU AI Act is the centrepiece. You need to understand the risk classification system (unacceptable, high, limited and minimal risk), the distinction between providers and deployers and what each must do, the obligations for general-purpose AI models, prohibited practices and the conformity assessment process. The exam tests whether you can apply these distinctions in context; knowing the categories is not enough if you cannot identify which category a given scenario falls into.
The NIST AI Risk Management Framework (AI RMF 1.0) provides the operational backbone for AI governance programmes. Its four functions; Govern, Map, Measure and Manage; appear in exam questions about how organisations structure their governance. Know the functions, what each does and how they interconnect. The companion Generative AI Profile (NIST AI 600-1) is also worth understanding at a high level.
ISO/IEC 42001, the international standard for AI management systems, is tested at the level of purpose and structure rather than clause-by-clause detail. Understand what it is, why it matters, how it differs from the NIST framework and why an organisation might pursue certification against it.
Beyond these three, the 2026 BoK now explicitly references emerging legislation including the South Korean AI Basic Law and US state-level AI laws (the Colorado AI Act, the Texas Responsible AI Governance Act). You do not need to memorise every provision, but you should understand the regulatory direction of travel and how these laws relate to the broader governance landscape.
GDPR Intersections
If you already hold a CIPP/E, you have an advantage. The AIGP BoK overlaps with the GDPR in several areas: automated decision-making under Article 22, Data Protection Impact Assessments under Article 35, lawful bases for processing personal data used in AI training and the transparency obligations that apply when AI systems interact with individuals. The 2026 BoK has shifted its framing from “notice and consent” to “lawful basis and transparency,” recognising that consent is only one of several legal grounds. This is familiar territory for CIPP/E holders; use that familiarity to accelerate your preparation.
Books Worth Reading
Federico Marengo’s Privacy in AI is the closest thing to a practical companion text for the AIGP. It covers the intersection of AI governance and data protection law with a focus on actionable steps rather than abstract principles. It is particularly useful for candidates who already hold a CIPP/E and want to understand how GDPR obligations translate into AI governance requirements. Our readers get a 10% discount with code privacystudygroup at checkout. Federico also publishes the Privacy and AI newsletter on LinkedIn, which is worth following for ongoing developments.
Beyond this, your primary reading should be primary sources: the EU AI Act itself, the NIST AI RMF, the OECD AI Principles, UNESCO’s Recommendation on the Ethics of AI and the relevant sections of the GDPR (particularly Articles 22, 35 and 36 on automated decision-making and DPIAs). These are freely available and more reliable than any summary.
AIGP Training Courses
IAPP Official Training
The IAPP offers its own AIGP training in three formats: in-person classroom sessions (typically two days), live virtual instructor-led courses and self-paced online modules. The in-person and live virtual options typically cost between €1,500 and €2,500. The self-paced online course runs around $995.
If you learn best in a structured classroom environment with an instructor to question, the in-person format has value; the discussions and sample questions that good instructors provide are difficult to replicate through self-study. However, the consistent feedback from our study groups is clear: the IAPP training alone does not fully prepare candidates for the exam. Members regularly report needing substantial additional study to bridge the gap between what the official training covers and what the exam actually tests. At the price point, that is a significant limitation.
22Academy AIGP Prep Suite
22Academy offers a comprehensive preparation programme aligned to the 2026 BoK (v2.1). It includes a diagnostic assessment to identify your starting level, structured study guides, an eLearning course with video lessons across 61 bite-sized modules, quizzes, digital (and print) flashcards, case studies, practice tests and a full 100-question trial exam. Materials are updated continuously to reflect BoK changes and regulatory developments, and access continues until you pass.
In terms of content coverage, exam alignment and value for money, it is the most comprehensive AIGP preparation option currently available. The combination of study guide, eLearning, multiple practice formats and trial exam in a single package means you do not need to piece together resources from multiple sources.
AIGP Exam Question Masterclass
If you already know the material but struggle with how IAPP frames its questions, the AIGP Exam Question Masterclass addresses that specific problem. It teaches you to think like a certification question writer: how Bloom’s Taxonomy maps onto AIGP questions, how to predict which governance concepts are most likely to be tested, how to decode scenario-based questions under time pressure and how to spot misleading answer choices. The course includes nine modules that take you from analysing question structures to building your own practice sets and running realistic trial exams. At €195 it is a focused investment for candidates who find that reading the material is not the same as answering questions about it.
Practice Exams: the Core of Your AIGP Study Guide
Practice exams are where preparation becomes real. Reading builds knowledge; testing reveals whether you can apply it under time pressure. The AIGP is a scenario-based exam where three out of four answers often look plausible. The only way to get comfortable choosing between them is to practise under timed conditions.
Start practice tests early. Do not leave them until the final week. Use early tests to identify weak domains, study those domains and then retest. This feedback loop is more effective than linear reading.
22Academy Practice Exams
22Academy’s AIGP practice exams are, at the time of writing, the most accurate and up-to-date option available. They are fully aligned to BoK v2.1, include detailed results analysis identifying your weakest domains and are written to reflect the style and difficulty of the real exam. The 100-question trial exam simulates actual exam conditions. If you invest in only one paid resource beyond the exam itself, this is where your money should go.
IAPP Practice Exam
The IAPP offers its own digital practice exam with 100 questions and answer explanations. It is useful for familiarising yourself with how the IAPP phrases questions, which has a distinctive style. Take it under timed conditions about two weeks before your exam to calibrate readiness. Study the rationales for both correct and incorrect answers; understanding why wrong answers are wrong teaches you as much as knowing what is right.
A Warning About Exam Dumps
You will find websites selling “real AIGP exam questions” or “100% pass guaranteed” question banks. These are exam dumps: stolen content that is frequently inaccurate, often outdated and always unethical. Using them violates your candidate agreement with the IAPP and can result in permanent decertification.
More practically, they do not work. Exam dumps train you to recognise specific question patterns rather than understand the material. The AIGP rewards applied understanding; memorised answers from a dump will not help you when the scenario presents a variation you have not seen before. If you are entering a profession built on governance, ethics and accountability, start as you mean to go on.
Useful Resources for Your AIGP Study Guide
The following institutional and framework resources are directly relevant to the AIGP curriculum. None of them sell exam prep; all of them deepen your understanding of the material the exam tests.
The OECD AI Policy Observatory (oecd.ai) compiles global AI governance data, policy frameworks and country-level implementation reports. The OECD AI Principles are referenced directly in the AIGP BoK and appear in exam questions about international governance norms.
NIST’s Trustworthy and Responsible AI Resource Center (airc.nist.gov) hosts the AI RMF, its Playbook, the Generative AI Profile (NIST AI 600-1) and supporting crosswalks. Essential reading for Domains I, III and IV.
ISO/IEC 42001 (AI management systems) is available through your national standards body. A summary understanding is sufficient for the exam; you do not need to purchase the full standard, but you should know its purpose, structure and relationship to other AI governance frameworks.
The European Commission’s AI Act text and supporting documentation, including the High-Level Expert Group’s Ethics Guidelines for Trustworthy AI, are essential for Domain II. Use the official adopted text, not earlier proposals.
UNESCO’s Recommendation on the Ethics of AI provides a global ethical framework that complements the regulatory focus of the EU AI Act and NIST RMF. It appears in the BoK under Domain I (responsible AI principles) and is worth reading as a primary source.
Join a Study Group
Studying alone for a certification exam is harder than it needs to be. No AIGP study guide replaces the value of a community. Our AIGP study groups on Facebook and LinkedIn have thousands of members, including candidates at every stage and certified professionals who generously share their experience. Members post questions, share resources, discuss tricky topics and report back after their exams. The collective intelligence of the group is a genuine advantage, and it costs nothing.
If you can find two or three people studying on a similar timeline, form a small study group within the larger community. Research consistently shows that explaining concepts to someone else is one of the most effective ways to learn; a study partner who asks “but why?” forces you to move from recognition to genuine understanding. Our article on studying together for certification success covers this in more detail.
Taking the AIGP Exam
Remote Proctoring vs. Test Centre
You can take the exam remotely via Pearson VUE’s OnVUE platform or in person at one of over 6,000 test centres worldwide. Both options work; neither is objectively better.
Remote proctoring offers convenience but introduces variables. Members of our study groups have reported technical difficulties including inability to scroll, webcam failures despite passing pre-exam system checks, long waits in the proctor queue and small text on screen. The environment requirements are strict: clear desk, no second monitors, no other people in the room and specific rules about what you can and cannot have visible.
If you choose remote, do a full dry run the day before. Fully charge your mouse and keyboard. Know how to increase text size on your screen. Disconnect docking stations and external monitors; you may be asked to show the proctor that they have been removed. Familiarise yourself with all the remote proctoring rules in advance.
Test centres remove the technology risk but add logistics. Book early if you want a specific date and location.
Exam Day Strategy
Read the question before the scenario. Scenario-based questions often contain irrelevant detail designed to distract. Reading the question first tells you what to look for in the scenario, which saves time and reduces confusion.
Eliminate first, then choose. With four options and only one correct answer, start by removing the answers you know are wrong. This is faster and more reliable than trying to identify the right answer from scratch.
Do not dwell. If a question is taking too long, flag it and move on. Later questions sometimes contain information that helps with earlier ones. You have roughly 1 minute 40 seconds per question; that is comfortable if you do not get stuck on any single one.
Trust your first instinct. Unless you have a specific reason to change an answer (you misread the question, for example), resist the urge to second-guess. Research on multiple-choice exams consistently shows that first answers are more often correct.
After the AIGP Exam
Your result appears on screen immediately. If you pass, the IAPP will email your digital certificate through Accredible and provide a PR toolkit through your MyIAPP profile. You are not fully certified until you pay the certification maintenance fee or IAPP membership. You can do this before or after sitting the exam.
If you do not pass, you are in good company. The AIGP is a difficult exam and many strong candidates need a second attempt. You must wait 7 days before scheduling a retake and pay the retake fee ($475 for members, $625 for non-members). Use the waiting period to review your weakest domains. If you used 22Academy’s trial exam, the personalised results analysis pinpoints exactly where to focus your remaining study time.
Maintaining Your Certification
The AIGP certification is valid for two years from the day after you pass. To maintain it, you must submit evidence of 20 Continuing Privacy Education (CPE) credits aligned to the AIGP BoK and pay a Certification Maintenance Fee. For IAPP members, the maintenance fee is included in your membership. For non-members, it is $250 per two-year term. You do not need to retake the exam.
CPE credits can be earned through IAPP webinars (many are free for members), industry conferences, relevant training and a range of other professional development activities. The IAPP’s CPE Central page lists available opportunities and lets you filter by certification and topic.
Where to Start
Download the AIGP Body of Knowledge v2.1 from iapp.org. Take the free AIGP assessment at 22academy.com to identify your baseline. Then build your study plan around the gaps. Bookmark this AIGP study guide and come back to it as your preparation develops.
Good luck with your preparation. Share your experience in the study group when you are done; the candidates coming after you will benefit from it, just as you benefit from those who came before.
— — —
