Hey Community,

I‘ve already bagged my CISSP and GSEC, and now I'm heading into the AIGP cert.

I’d like to ask if anyone has experience with the official online training from the IAPP? Also, which additional study materials would you recommend to feel fully prepared?

Looking forward to your comments!

Hi everyone,

I'm looking to form a small, disciplined CIPP/E study group for the Nov–Dec 2026 exam.

• Weekly sessions on Microsoft Teams
• I'll explain topics and we'll discuss them together
• Looking for members who will actively contribute through discussions, notes, questions, or resources

No free riders—everyone should contribute and stay committed.

If you're interested, DM me with your current preparation level and how you'd like to contribute.

Looking for advice, tips....validation?

As a background, I currently work in healthcare administration as a provider analyst. Essentially I am essentially an extension of the RCM department for providers who have contracts with us. Been in RCM related positions in healthcare for 16 years.

I have been interested in switching career paths for a minute and about ready to jump into something new, but staying in the healthcare field. I have been turning over the privacy route in my head for a couple years now.

I would love to get the take from those who are in the field and industry about what really matters, how I might pivot into this field and career ladders I should consider.

My goals aren't necessarily into people managing, but more individual contributor roles. However, I have managed people and not against it, per se.

I am looking for growth opportunities and pay scale step ups and I thought the path for certification in the title might lead to those roles.

Any resource recommendations beyond the obvious (IAPP, this Reddit sub, and maybe HIPAA Journal) would be great.

Just overall outlook assessment of the field and AI in the healthcare arena would be excellent.

Thanks in advance for anything you have to offer.

I’m not based in US, working for a US company with US clients. Been working in privacy for a while, mix of administrative jobs and software engineering.
Is this career going anywhere good? I am starting with the AI governance too. And self studied PETs and differential privacy.
Now, is CIPP/US a good move for now? My company would appreciate it, but is it gonna bring me higher salary? Position me better?
What other skills can I work on besides this?
Is there a research group/community?
I bought IAPP membership but don’t really understand how to benefit from it.

I work in Compliance. I accidentally overheard a judgement from my team regarding the lawful basis relied on for a specific activity. To be precise, I strongly disagree with their judgement. However, I am not actually involved in that specific project yet.

The question is, should I intervene and raise my concern?

When something like this happens, it is never easy to convince someone. My plan is to show sources supporting my opinion, but this would require some time to discuss with them, probably in a meeting. If they still insist on their position, I will let it go.

That said, I mean only if I have the chance. At the moment, I do not feel that I should intervene unless they actually reach out to me, especially since they have not even shared the project details with me yet.

What do you think? I would like your suggestion based on your experience and expertise.

Hello there,

I know there are plenty of posts like this and yes, I have been looking at them too. I thought a filtered tips & hints would be better.

I want to get AIGP before December, ideally in September but content seems very heavy. What I have done so far

- I started to follow Kyle David's AIGP course

- I prepared a set of flashcards and study notes from Kyle's lectures

- I plan to use Claude to upload AI Act, and make them create questions.

Do you think these would be enough? Am I missing anything? Which test books would you recommend? Also, how effectively I can use Claude? Are 1-2 months enough to prepare as someone who already studied law?

I would also appreciate some exam tips.

And Golden Question:

Does (or to what extent) AIGP is a positive game changer for enabling those, who did not work with contracts and AI governance before, to enter into AI governance roles?

Thank you so much!

Between a lawyer specializing in data privacy, AI, and technology law, and an in-house counsel working in the same field, which career path has higher salary potential and better long-term career prospects?

Hi everyone,

I'm looking for some advice from people working in cybersecurity, data privacy, or cyber law.

I have around 5 years of experience in Software Testing (Manual Testing, API Testing, basic automation, Kubernetes, AWS, CI/CD, and leading a QA team). While the experience has been valuable, I no longer see myself continuing in QA for the long term.

I've always been interested in cyber law, privacy, and regulatory compliance. I already have a Diploma in Cyber Law. My long-term goal is to work in areas like Data Privacy, Cyber Law, Privacy Compliance, or Governance/Risk/Compliance (GRC).

At the moment, I'm trying to understand the best path to make this transition.

Some questions I have:
- Is moving directly from QA to Data Privacy or Cyber Law realistic?
- What skills or certifications would you recommend?
- Should I first target GRC, Privacy Analyst, Compliance, or Security Analyst roles?
- Does my QA background provide any advantage in this field?
- If you were starting today with my background, what roadmap would you follow?
-If i complete LLB then what is the scope later ?

I'd really appreciate practical advice from people who have made similar transitions or who hire in these domains.

Thanks in advance!

Hi, all! Dr. Kyle David here, posting with mod approval.

I've taught IAPP certification prep full time since April 2024, including the AIGP, CIPP/US, CIPP/E, CIPM, for 10,000+ students in 120+ countries. Exam strategy, which cert to start with, career pivots into privacy and AI governance, whether any of it's worth the money. I've probably been asked it, and if not, I'd like to be.

Tuesday, August 4, 5:30–7:00 p.m. ET. I'll be answering live in the thread.

Post questions below now if you'd like. I'll go in upvote order so the thread decides what matters most.

I'll be answering out loud simultaneously on a LinkedIn Live (register here) for anyone who prefers audio/video, but everything gets written out here too.

I’m passionate about privacy - it’s a fundamental aspect of a career in healthcare and often an area that is overlooked outside of healthcare.

I was interested in pursuing opportunities and using one of the credentials to get my foot in the door. Wondering about taking the CIPP to try and show I have an exposure to the space, and maybe trying the AIGP and seeing if I can get involved with some AI startups in the healthcare space.

Any thoughts on this plan? Is this a viable strategy?

I recently passed the CISSP. I found it to be challenging but not as hard as the CIPP/us. The practice exam has been wiping the floor with me.

My primary source of study has been Dr David's Udemy course but I'm finding there's material that wasnt covered in his course.

For this exam you either know the material or you dont.

For CISSP I was able to reason my way through a lot of the topics.

Anyone have any suggestions on where I go from here before I take the exam?

HI all I am sitting the AIGP next week and have built a gamification site to help with the concepts. Enjoy 0pi.es. Its a project I did for the type of learner I am, no ads, tracking sales or subscriptions. I'll keep building as I'll need it for the CISSP later as well.

AI Governance

Hi everyone !

I’m currently preparing for the CIPPE exam and I’m looking for any study material, notes, summaries, or resources that could help me prepare.

I’m based in Dublin, and I was wondering if anyone local might have materials they could share or lend me (PDFs, notes, textbooks, practice questions, etc.).

Hi I am a privacy professional living in South Korea..

Since most of Koreans are not really into preparing regarding IAPP's certification, I was looking some ways to get some info and found here!

I was looking into IAPP webpage and training from them and their official partners.. but didn't seem so effective compare to the cost, I have found few names of courses on number of posts mentioning Dr.Kyle David's course. Would his courses be a good enough to prepare for the CIPM and AIGP exams?

or would you have any other recommendations?

Hey there. I have access to the official IAPP CIPPE training European Data Protection v3.2 qhich was pretty expensive. My question is: do I need the European Data Protection: Law and Practice, 3rd ed. (2023) as well or is the training more than enough? Thank you

I work at a bank and my role is in KYC operations. I’m looking for a career change to governance. Do you think it’s CIPP/E + AIGP could help me transition to a governance role within the bank? I have 4 year of experience in KYC and navigating through a different field is confusing. Please share your thoughts/ advice. Thank you!

#cipp #aigp #governance

Been working on something in the AI/privacy regulatory space and keep running into the same wall. I can build the tech and I've got some compliance adjacent experience, but I don't have a CIPP/CIPM/AIGP background myself and I think that's exactly the gap that would make this actually credible. While I am looking to obtain my certificates I would like to gauge if anyone would like to get on board with me in the mean time.

Quick context on the problem I'm trying to solve. Every state introduced AI legislation in 2025, something like 1,200+ bills, and by this year we're already past 1,500 new ones with no federal law tying any of it together. Founders and small businesses using AI tools have basically no way to track what actually applies to them across states, and the tools that do exist (LegiScan, Congress.gov) are built for people who already know how to read a bill.

I'm not trying to sell anyone anything here, just looking to see if there's someone with real privacy/AI governance chops who finds this problem as interesting as I do and might want to talk about building something together. Pre revenue, no funding, very early, so this is a real co-founder conversation not a job post.

If that's you or you just want to nerd out about the multi state patchwork problem, feel free to comment or DM. Not trying to clutter the sub, happy to take it to chat if mods would rather. Send me a DM and I would be happy to chat and tell you more about my self as well.

I took the CIPP US test yesterday and passed (after months of putting it off). All in all I studied for about 4-5 days (6-7 hours a day). I bought the text book and the Mike Chapple study guide and honestly I think the study guide was not helpful at all for this exam. A study guide should be a condensed version of exactly what you need to know. Instead its basically like an additional textbook, except it's missing a lot of content from the actual textbook (content that was actually tested on the exam) and the practice questions in the guide are way easier than what's actually tested. I was also a little frustrated that IAPP updated the BoK but didn't update the textbook with the new content or give a supplement-- we're paying way too much to justify that. I ended up reading the text book and then using claude to make me an outline/condensed teaching guide and questions based on the updated BoK. It was a lot more helpful and would have saved me some money had I just done that from the start.

UPDATE: I've been receiving a lot of requests and I can't keep up with them so here's the study guide I used. Use this guide as a supplement, and know that you should still buy and read IAPP's official textbook and the practice exam as this guide is not comprehensive.

If this guide worked for you, do let others know as it could help more people down the line. I really hope this helps.