IAPP Body Of Knowledge Updates 2026
**Last updated: 12 August 2026.**
No. As of 12 August 2026 the IAPP has announced no Body of Knowledge update for CIPP/E, CIPP/US, CIPM or CIPT. All four certifications still run on the versions that took effect on 1 September 2025.
Every IAPP Body of Knowledge commits the IAPP to at least 90 days’ notice before new content reaches an exam. No update is scheduled, and none can arrive without three months’ warning first.
Which IAPP Body of Knowledge version is current in 2026
| Certification | Current version | Effective date | Supersedes |
| CIPP/E | 1.3.3 | 1 September 2025 | 1.3.2 |
| CIPP/US | 2.6.1 | 1 September 2025 | 2.6 |
| CIPM | 4.2.0 | 1 September 2025 | 4.1.0 |
| CIPT | 4.0.0 | 1 September 2025 | 3.2.0 |
| AIGP | 2.1 | 2 February 2026 | 2.0.1 |
The CIPP/E Exam Blueprint is version 2.3.0. The CIPP/US Examination Blueprint is version 2.5. Both took effect on 1 September 2025, alongside their Bodies of Knowledge.
Each IAPP Body of Knowledge is a free download direct from the IAPP: CIPP/E, CIPP/US, CIPM and CIPT. Every document states its version and effective date on the cover, so open the PDF and check there rather than trusting a filename, a bookmark or a summary someone else wrote.
AIGP runs on a separate cycle. The current version took effect in February 2026 rather than September 2025. The September pattern on this page does not apply to the AIGP exam.
Is the IAPP updating its Bodies of Knowledge in September 2026
No announcement has appeared on the IAPP website as of 12 August 2026.
In a normal cycle the IAPP publishes updated documents in late spring or early summer, effective on 1 September. The 2025 cycle followed that pattern. The IAPP set out those changes on a dedicated Q3 2025 annual updates page covering five certifications. No equivalent page exists for 2026.
Two IAPP documents describe the update cadence differently, and the difference matters this year.
The IAPP Certification Candidate Handbook, version 5.3.2, effective 1 June 2026, states that the IAPP updates its exams annually. It puts the change at roughly 10 to 15% of exam content each time.
Each IAPP Body of Knowledge states something narrower. The document is reviewed and, if necessary, updated every year.
Reviewed every year, updated if necessary. A year without changes therefore fits the Bodies of Knowledge as written. It does not show that the schedule has slipped.
What the IAPP 90-day notice rule guarantees
Both the Candidate Handbook and each IAPP Body of Knowledge set the same floor. The IAPP communicates changes at least 90 days before new content appears in an exam, and the Handbook adds that it announces updates via its website.
The practical consequence is a rolling floor. Count 90 days forward from any announcement, and that is the earliest the new content can reach an exam.
Nothing is currently scheduled for any of these four exams. The floor also moves: every day without an announcement pushes the earliest possible change another day out. On 12 August 2026 that floor sat around 10 November, and it advances daily for as long as the silence lasts.
What changed in each Body of Knowledge
Each of the four documents changed in a different way, and the difference decides how much of your material is still usable.
CIPP/E 1.3.3
The current CIPP/E Body of Knowledge splits the former Domain II into three domains. They cover law and regulation, data processing, and scope and accountability. Topics and question counts carried across unchanged, so the change is structural rather than substantive. Material organised the old way can teach sound content under the wrong map.
It also adds EDPB Opinion 22/2024 on processors and sub-processors, EDPB Opinion 04/2024 on main establishment, and EDPB Guidelines 1/2024 on legitimate interests. Topics on AI and the GDPR, and on privacy and security incidents, come in with them.
CIPP/US 2.6.1
The current CIPP/US Body of Knowledge moves substantial weight onto state privacy laws. The State Data Privacy and Security Laws sub-section rises from 6 to 8 questions, up to 13 to 17. That makes it the second-heaviest sub-section on the exam.
Six sections each drop by roughly one to two questions: the structure of US law, cross-sector FTC protection, healthcare, financial privacy, law enforcement and workplace privacy. New topics include Mergers, Acquisitions and Divestitures, Departments of Insurance, NAIC AIS Governance Guidelines, verifiable parental consent, fiduciary duty, and the intersection between US and non-US privacy laws. Big Data comes out.
CIPM 4.2.0
The current CIPM Body of Knowledge mostly clarifies language and makes examples more concrete. It merges, relocates or deletes some performance indicators where the content already appears elsewhere. Older CIPM material sits closest to current of the four.
CIPT 4.0.0
The current CIPT Body of Knowledge cuts the domains from seven to five and redistributes content between them. It adds a performance indicator on privacy threat models and frameworks, naming LINDDUN and MITRE PANOPTIC.
It also drops three performance indicators outright. They covered privacy risk in quantum computing, in blockchain, cryptocurrencies and non-fungible tokens, and in virtual and augmented reality. Anyone still revising those three topics for the CIPT is studying material that cannot be tested.
How to prepare when the syllabus might change
Six habits keep a study plan usable whether or not the IAPP Body of Knowledge moves under it.
Study from the Body of Knowledge itself
The IAPP states that no question appears on an exam unless a topic on that exam’s Body of Knowledge covers it. The document is the syllabus. Every course, question bank and summary interprets it.
Download the current version and check the current version on the cover. Then check your study material against the document rather than trusting it instead.
Diagnose before you study
Establish a baseline first and let it set your reading order. Working through the syllabus in the order it happens to be written wastes time on material you already know. The free CIPP/E assessment covers European data protection, and the free AIGP assessment covers AI governance.
Practise on questions rather than prose
Reading produces recognition. Exams demand retrieval under time pressure, between four options written to resemble each other. Only one of those is tested.
The version question bites hardest here. A question bank built on a superseded document drills you on weightings that no longer hold. In the CIPT case it drills indicators that no longer exist. Ask which version any bank uses before committing a month to it.
The Exam Question Masterclass teaches the method for reading a stem, separating look-alike options and choosing under pressure, per certification: CIPP/E, CIPP/US, CIPM and CIPT.
Ask your provider which version they teach
Any serious provider names the version behind its material. Silence on that point is itself an answer. Material built on a superseded IAPP Body of Knowledge still teaches privacy competently. It simply teaches the wrong list, with the wrong weightings.
Watch for beta exams
When changes grow substantial enough to need validating, the IAPP runs beta exams on the new forms shortly before the effective date. The 2025 cycle ran betas for CIPP/US and CIPT. Registration ran between 1 June and 26 July 2025, with testing from 21 to 27 July, one month before the effective date. A beta window opening signals strongly that a substantive update follows.
Do not study only what changed
An annual update changes roughly 10 to 15% of content, which leaves 85 to 90% untouched. Most of your exam sits in the part that did not move.
Common questions
Has the IAPP announced a 2026 Body of Knowledge update? No announcement had appeared on the IAPP website as of 12 August 2026 for CIPP/E, CIPP/US, CIPM or CIPT.
Which CIPP/E Body of Knowledge is current? Version 1.3.3, effective 1 September 2025, superseding 1.3.2.
Which CIPP/US Body of Knowledge is current? Version 2.6.1, effective 1 September 2025, superseding 2.6.
Which CIPM Body of Knowledge is current? Version 4.2.0, effective 1 September 2025, superseding 4.1.0.
Which CIPT Body of Knowledge is current? Version 4.0.0, effective 1 September 2025, superseding 3.2.0.
How much notice does the IAPP give before an exam changes? At least 90 days, announced via the IAPP website.
How much of an IAPP exam changes in an annual update? Approximately 10 to 15% of exam content, according to the IAPP Certification Candidate Handbook.
Where is the version number in an IAPP Body of Knowledge? On the cover of the PDF, next to the effective date, and repeated in the footer of every page.
Is it safe to book an IAPP exam now? Yes. No update is scheduled for CIPP/E, CIPP/US, CIPM or CIPT, and the IAPP gives at least 90 days’ notice, so no exam booked within the next three months can change syllabus before you sit it.
Keeping this page current
We update this page whenever the IAPP publishes a new Body of Knowledge or announces a change. The date at the top records the last check. For the wider preparation sequence, the CIPP/E study guide sets out the order to work the domains, and the guide to exam structure and policies covers how scored and unscored questions work.
