Quick answer

To keep the CIPM active, you need 20 CPE credits in each two-year certification term and must pay the $250 certification maintenance fee per term. The fee is included in IAPP membership. Credits come from IAPP and third-party webinars, conferences, training, writing, teaching and other privacy-related activities. Relevant activities can count toward more than one IAPP certification. If you don't meet the requirements by the end of your term, the certification can be suspended until you catch up.

Renewal requirements

RequirementDetail
TermTwo years
CPE20 credits per term
Maintenance fee$250 per term, or included with active IAPP membership
Multiple certifications20 credits each, but relevant activities can count toward several
ReportingLog credits in your IAPP account

What counts as CPE

ActivityTypical credit
IAPP web conferencesUsually 1 credit per hour, often pre-approved
Conferences (IAPP or other privacy events)Credits per session hour
Formal training and coursesCredits per instructional hour
Writing articles or books on privacyCredits per published work, subject to IAPP rules
Teaching or presentingCredits for preparation and delivery, subject to IAPP rules
Volunteering (e.g. KnowledgeNet leadership)Credits according to IAPP policy

Check the current IAPP CPE policy for exact rules and limits by category.

Free and low-cost ways to earn credits

  • IAPP web conferences (many are free for members)
  • Local KnowledgeNet chapter meetings
  • Regulator and industry webinars relevant to privacy program management
  • Writing for your company blog or professional publications, if eligible
  • Internal training you design and deliver, if eligible

Adding a second IAPP credential?

The AIGP Complete Pack includes a Cram Guide and 300 BoK v2.1 questions. Many CIPM holders add the AIGP next.

Get the Complete Pack
Smart stacking: if you hold the CIPM with the CIPP/E or AIGP, choose sessions that are relevant to more than one, such as privacy program metrics for AI, or DPIAs and AI impact assessments. Relevant credits can count toward each.

A simple two-year plan

  1. Note your term end date in your calendar with reminders at 18 and 22 months.
  2. Aim for about one credit a month. That gets you to 20 to 24 with a buffer.
  3. Log credits as you go, not at the deadline.
  4. Keep evidence (certificates, agendas) in case of audit.
  5. Confirm your membership or maintenance fee is paid before the term ends.

If your CIPM lapses

If the term ends without enough credits or payment, the IAPP can suspend the certification. Suspended holders shouldn't use the credential. Contact the IAPP to restore it, and check the current policy for grace periods and reinstatement steps. Compare CIPP/E renewal and AIGP renewal.

Example: 20 credits in two years

ActivityCredits (illustrative)
Eight one-hour web conferences8
One day at a privacy conference6
Four KnowledgeNet chapter meetings4
Presenting an internal privacy training session2
Total20

The credit values are illustrative. The IAPP's CPE policy sets the actual rules for each category, including any limits. Keep certificates and agendas for every activity you log.

Membership or maintenance fee?

If you hold one certification, the $250 fee per two years is cheaper than Professional membership (about $295 a year). If you hold two or more certifications, or want member exam pricing and resources, membership often works out better, because it covers maintenance for all of them.

Topics that make good CIPM CPE

  • Privacy programme metrics and reporting
  • Vendor risk management and third-party assurance
  • Privacy in mergers and acquisitions
  • Incident response exercises and lessons learned
  • AI governance, which shares many programme management skills
  • New laws and regulator guidance affecting your programme

Common renewal mistakes

  1. Leaving credits until the last month.
  2. Assuming shared credits cover everything: each certification still needs 20.
  3. Letting membership lapse without paying the maintenance fee instead.
  4. Keeping no evidence for an audit.

Key takeaways

  • The CIPM needs 20 CPE credits every two years.
  • The $250 maintenance fee per term is included in IAPP membership.
  • Relevant activities can count toward several IAPP certifications.
  • Log credits as you go and keep evidence for audits.

Frequently asked questions

How many CPE credits does the CIPM need?

20 credits every two years.

How much is the CIPM maintenance fee?

$250 per two-year term. It's included if you're an active IAPP member.

Can CPE count toward both the CIPM and the CIPP/E?

Yes, if the activity is relevant to both certifications.

What happens if I don't renew the CIPM?

The certification can be suspended until you meet the requirements. Check the IAPP's current policy for reinstatement.

What topics count as CIPM CPE?

Activities relevant to privacy programme management, such as metrics, vendor risk, incident response, M&A privacy, AI governance and new regulatory guidance. Check the IAPP CPE policy for each activity type.

Can I earn CIPM CPE from non-IAPP events?

Yes, if the activity is relevant to privacy programme management and meets the IAPP CPE policy. Keep certificates or agendas as evidence.

What happens to my CIPM if my membership lapses?

If membership lapses, you need to pay the maintenance fee instead to keep the certification active. Without either, the certification can be suspended at the end of the term.

Sources

  1. IAPP CPE policy
  2. IAPP: stay certified

Last reviewed: October 2026.