CIPP/E

Can you pass this 10-question CIPP/E quiz?

3 October 2026Credential Press2 min read

Ten multiple-choice questions on the CIPP/E exam, its Body of Knowledge and two GDPR numbers everyone should know. Tap an answer to see why, with the source. About five minutes.

Can you get 10 out of 10?

1 of 10How many domains are in the CIPP/E Body of Knowledge?

Show answer

Answer: B. Five domains and 18 competencies. Source: IAPP, CIPP/E Body of Knowledge, version 1.3.3, effective 1 September 2025

2 of 10Which domain can carry the most questions?

Show answer

Answer: B. Domain II carries 18 to 28 questions. Source: IAPP, CIPP/E Body of Knowledge, version 1.3.3, effective 1 September 2025

3 of 10Which competency carries the most questions?

Show answer

Answer: B. II.C, data subjects' rights, at 8 to 12. Source: IAPP, CIPP/E Body of Knowledge, version 1.3.3, effective 1 September 2025

4 of 10Which domain covers international data transfers?

Show answer

Answer: B. Competency III.D, in European Data Processing. Source: IAPP, CIPP/E Body of Knowledge, version 1.3.3, effective 1 September 2025

5 of 10When did version 1.3.3 of the Body of Knowledge take effect?

Show answer

Answer: C. 1 September 2025; it was approved on 4 March 2025. Source: IAPP, CIPP/E Body of Knowledge, version 1.3.3, effective 1 September 2025

6 of 10How many questions are on the CIPP/E exam?

Show answer

Answer: B. 90 questions. Source: IAPP, certification FAQs

7 of 10How long do you get?

Show answer

Answer: B. 2.5 hours, with an optional 15-minute break halfway. Source: IAPP, certification FAQs

8 of 10What score do you need to pass?

Show answer

Answer: B. 300 on a scale of 100 to 500. Source: IAPP, certification FAQs

9 of 10How soon must a controller notify the supervisory authority of a personal data breach, where feasible?

Show answer

Answer: C. Without undue delay and, where feasible, within 72 hours of becoming aware of it. Source: GDPR, Article 33(1)

10 of 10What is the GDPR's top fine?

Show answer

Answer: B. Up to EUR 20 million or 4% of worldwide annual turnover, whichever is higher. Source: GDPR, Article 83(5)

CIPP/E flashcards for Anki

front,back
How many domains are in the CIPP/E Body of Knowledge? | A) 4 / B) 5 / C) 6 / D) 7,B) 5. Five domains and 18 competencies.
Which domain can carry the most questions? | A) I Introduction / B) II Law and Regulation / C) III Data Processing / D) V Compliance,B) II Law and Regulation. Domain II carries 18 to 28 questions.
Which competency carries the most questions? | A) II.B Security of personal data / B) II.C Data subjects' rights / C) III.D International transfers / D) IV.B Accountability,"B) II.C Data subjects' rights. II.C, data subjects' rights, at 8 to 12."
Which domain covers international data transfers? | A) Domain II / B) Domain III / C) Domain IV / D) Domain V,"B) Domain III. Competency III.D, in European Data Processing."
When did version 1.3.3 of the Body of Knowledge take effect? | A) 1 January 2024 / B) 4 March 2025 / C) 1 September 2025 / D) 1 January 2026,C) 1 September 2025. 1 September 2025; it was approved on 4 March 2025.
How many questions are on the CIPP/E exam? | A) 75 / B) 90 / C) 100 / D) 120,B) 90. 90 questions.
How long do you get? | A) 2 hours / B) 2.5 hours / C) 3 hours / D) 4 hours,"B) 2.5 hours. 2.5 hours, with an optional 15-minute break halfway."
What score do you need to pass? | A) 70% / B) 300 on a 100 to 500 scale / C) 450 on a 200 to 800 scale / D) 700 of 1000,B) 300 on a 100 to 500 scale. 300 on a scale of 100 to 500.
"How soon must a controller notify the supervisory authority of a personal data breach, where feasible? | A) 24 hours / B) 48 hours / C) 72 hours / D) One week","C) 72 hours. Without undue delay and, where feasible, within 72 hours of becoming aware of it."
What is the GDPR's top fine? | A) EUR 10 million or 2% / B) EUR 20 million or 4% / C) EUR 35 million or 7% / D) EUR 50 million or 5%,"B) EUR 20 million or 4%. Up to EUR 20 million or 4% of worldwide annual turnover, whichever is higher."

front,back
How many domains are in the CIPP/E Body of Knowledge? | A) 4 / B) 5 / C) 6 / D) 7,B) 5. Five domains and 18 competencies.
Which domain can carry the most questions? | A) I Introduction / B) II Law and Regulation / C) III Data Processing / D) V Compliance,B) II Law and Regulation. Domain II carries 18 to 28 questions.
Which competency carries the most questions? | A) II.B Security of personal data / B) II.C Data subjects' rights / C) III.D International transfers / D) IV.B Accountability,"B) II.C Data subjects' rights. II.C, data subjects' rights, at 8 to 12."
Which domain covers international data transfers? | A) Domain II / B) Domain III / C) Domain IV / D) Domain V,"B) Domain III. Competency III.D, in European Data Processing."
When did version 1.3.3 of the Body of Knowledge take effect? | A) 1 January 2024 / B) 4 March 2025 / C) 1 September 2025 / D) 1 January 2026,C) 1 September 2025. 1 September 2025; it was approved on 4 March 2025.
How many questions are on the CIPP/E exam? | A) 75 / B) 90 / C) 100 / D) 120,B) 90. 90 questions.
How long do you get? | A) 2 hours / B) 2.5 hours / C) 3 hours / D) 4 hours,"B) 2.5 hours. 2.5 hours, with an optional 15-minute break halfway."
What score do you need to pass? | A) 70% / B) 300 on a 100 to 500 scale / C) 450 on a 200 to 800 scale / D) 700 of 1000,B) 300 on a 100 to 500 scale. 300 on a scale of 100 to 500.
"How soon must a controller notify the supervisory authority of a personal data breach, where feasible? | A) 24 hours / B) 48 hours / C) 72 hours / D) One week","C) 72 hours. Without undue delay and, where feasible, within 72 hours of becoming aware of it."
What is the GDPR's top fine? | A) EUR 10 million or 2% / B) EUR 20 million or 4% / C) EUR 35 million or 7% / D) EUR 50 million or 5%,"B) EUR 20 million or 4%. Up to EUR 20 million or 4% of worldwide annual turnover, whichever is higher."