Best answer questions offer options that may all be partly true. The skill is ranking them against the condition in the stem: FIRST, BEST, MOST or LEAST. A routine for every question, with a worked GDPR example.

Which IAPP certification to take first depends on your role. The routes from data protection officer to privacy engineer, what each certification covers and how long the first one takes at three hours a day.

Fill in the blank questions test exact wording, and the wrong options are the words candidates confuse. Predict the answer before reading the options, solve two-blank questions one blank at a time and read reversed items for the one phrase that decides.

What a data protection officer does, when the GDPR makes the role mandatory, what Article 37 asks of the person and why the career route runs from the CIPP/E to the CIPM.

Sequence questions ask you to order steps, name the next step or find where a proposed order first goes wrong. The dependency method rebuilds the order from what each step needs, with a worked GDPR breach example.

Spaced repetition means reviewing the same material at growing intervals. Here is what the research says about the gaps, how to plan reviews for an exam a month away and which IAPP topics need the shortest gaps.

Federal statutes, state laws and the FTC make the CIPP/US a broad exam. Here is what each domain asks, how long a beginner needs, how the questions work and what four routes to readiness cost.

The CIPM asks how you run a privacy programme. Here is what each of its six domains covers, how long a beginner needs, how the questions work and what four routes to readiness cost.

The IAPP’s new AI Specialist, Legal (AISL) certification launches in January 2027. What the draft covers, what is still unknown, who should take it and why EU lawyers should read it carefully.