To keep the CIPM active, you need 20 CPE credits in each two-year certification term and must pay the $250 certification maintenance fee per term. The fee is included in IAPP membership. Credits come from IAPP and third-party webinars, conferences, training, writing, teaching and other privacy-related activities. Relevant activities can count toward more than one IAPP certification. If you don't meet the requirements by the end of your term, the certification can be suspended until you catch up.
Renewal requirements
| Requirement | Detail |
|---|---|
| Term | Two years |
| CPE | 20 credits per term |
| Maintenance fee | $250 per term, or included with active IAPP membership |
| Multiple certifications | 20 credits each, but relevant activities can count toward several |
| Reporting | Log credits in your IAPP account |
What counts as CPE
| Activity | Typical credit |
|---|---|
| IAPP web conferences | Usually 1 credit per hour, often pre-approved |
| Conferences (IAPP or other privacy events) | Credits per session hour |
| Formal training and courses | Credits per instructional hour |
| Writing articles or books on privacy | Credits per published work, subject to IAPP rules |
| Teaching or presenting | Credits for preparation and delivery, subject to IAPP rules |
| Volunteering (e.g. KnowledgeNet leadership) | Credits according to IAPP policy |
Check the current IAPP CPE policy for exact rules and limits by category.
Free and low-cost ways to earn credits
- IAPP web conferences (many are free for members)
- Local KnowledgeNet chapter meetings
- Regulator and industry webinars relevant to privacy program management
- Writing for your company blog or professional publications, if eligible
- Internal training you design and deliver, if eligible
Adding a second IAPP credential?
The AIGP Complete Pack includes a Cram Guide and 300 BoK v2.1 questions. Many CIPM holders add the AIGP next.
Get the Complete PackA simple two-year plan
- Note your term end date in your calendar with reminders at 18 and 22 months.
- Aim for about one credit a month. That gets you to 20 to 24 with a buffer.
- Log credits as you go, not at the deadline.
- Keep evidence (certificates, agendas) in case of audit.
- Confirm your membership or maintenance fee is paid before the term ends.
If your CIPM lapses
If the term ends without enough credits or payment, the IAPP can suspend the certification. Suspended holders shouldn't use the credential. Contact the IAPP to restore it, and check the current policy for grace periods and reinstatement steps. Compare CIPP/E renewal and AIGP renewal.
Example: 20 credits in two years
| Activity | Credits (illustrative) |
|---|---|
| Eight one-hour web conferences | 8 |
| One day at a privacy conference | 6 |
| Four KnowledgeNet chapter meetings | 4 |
| Presenting an internal privacy training session | 2 |
| Total | 20 |
The credit values are illustrative. The IAPP's CPE policy sets the actual rules for each category, including any limits. Keep certificates and agendas for every activity you log.
Membership or maintenance fee?
If you hold one certification, the $250 fee per two years is cheaper than Professional membership (about $295 a year). If you hold two or more certifications, or want member exam pricing and resources, membership often works out better, because it covers maintenance for all of them.
Topics that make good CIPM CPE
- Privacy programme metrics and reporting
- Vendor risk management and third-party assurance
- Privacy in mergers and acquisitions
- Incident response exercises and lessons learned
- AI governance, which shares many programme management skills
- New laws and regulator guidance affecting your programme
Common renewal mistakes
- Leaving credits until the last month.
- Assuming shared credits cover everything: each certification still needs 20.
- Letting membership lapse without paying the maintenance fee instead.
- Keeping no evidence for an audit.
Key takeaways
- The CIPM needs 20 CPE credits every two years.
- The $250 maintenance fee per term is included in IAPP membership.
- Relevant activities can count toward several IAPP certifications.
- Log credits as you go and keep evidence for audits.
Frequently asked questions
How many CPE credits does the CIPM need?
20 credits every two years.
How much is the CIPM maintenance fee?
$250 per two-year term. It's included if you're an active IAPP member.
Can CPE count toward both the CIPM and the CIPP/E?
Yes, if the activity is relevant to both certifications.
What happens if I don't renew the CIPM?
The certification can be suspended until you meet the requirements. Check the IAPP's current policy for reinstatement.
What topics count as CIPM CPE?
Activities relevant to privacy programme management, such as metrics, vendor risk, incident response, M&A privacy, AI governance and new regulatory guidance. Check the IAPP CPE policy for each activity type.
Can I earn CIPM CPE from non-IAPP events?
Yes, if the activity is relevant to privacy programme management and meets the IAPP CPE policy. Keep certificates or agendas as evidence.
What happens to my CIPM if my membership lapses?
If membership lapses, you need to pay the maintenance fee instead to keep the certification active. Without either, the certification can be suspended at the end of the term.
Sources
Last reviewed: October 2026.