IAPP CIPP/E Exam Prep Book 2026 with Apoorva Sharma

An unofficial 596-page CIPP/E exam prep book on the GDPR and European data protection law, by Mumbai lawyer Apoorva Sharma.

This CIPP/E study guide is a 596-page unofficial exam prep book for the IAPP Certified Information Privacy Professional/Europe (CIPP/E) examination, written by Apoorva Sharma, a lawyer based in Mumbai, India. Its 42 chapters follow the five domains of the IAPP's CIPP/E Body of Knowledge, version 1.3.3 (effective 1 September 2025): the origins and institutions of European data protection, the GDPR's concepts, rights and security duties, lawful processing and international transfers, scope, accountability and enforcement, and compliance in employment, surveillance, marketing and online technology. It is delivered as PDF and editable DOCX.

Key facts

• Author: Apoorva Sharma, lawyer, Mumbai, India
• Exam: IAPP CIPP/E (Certified Information Privacy Professional/Europe)
• Syllabus: CIPP/E Body of Knowledge v1.3.3, used only as a topic map
• Edition: 2026 edition (October 2026); law stated as at 1 October 2026
• Length: 596 pages, 42 chapters in six parts
• Format: PDF + editable DOCX (Word), instant download
• Price: ₹4,000 / US$49

What is the CIPP/E exam?

The CIPP/E is the International Association of Privacy Professionals' certification in European data protection law. At the time of writing it has 90 multiple-choice questions, 75 scored and 15 unscored, in 150 minutes, with results on a 100–500 scale and 300 needed to pass. Domain II (GDPR concepts, security and data subject rights) carries the most questions. Confirm current examination details directly with the IAPP.

Who is this CIPP/E study guide for?

• Candidates preparing for the IAPP CIPP/E examination in 2026.
• Privacy, legal and compliance professionals in Europe, India and elsewhere who work with the GDPR.
• In-house teams at companies offering services to people in the EU, including technology, financial services, healthcare and outsourcing businesses.

What's inside?

• CIPP/E Exam Prep: GDPR and European Data Protection, 2026 edition, 596 pages, PDF.
• The same book as an editable DOCX (Word) file.
• A Start Here guide with the domain map, 4-, 6- and 8-week reading plans and the disclaimer.

What does the book cover?

• Part I, Introduction to European data protection (Ch 1–6): origins of the right to privacy and data protection; the OECD Guidelines, Convention 108 and 108+, and the Treaty of Lisbon; harmonisation from the 1995 Directive to the GDPR, the EEA and Brexit; the EU and Council of Europe institutions; the ePrivacy and e-Commerce Directives; the GDPR alongside the Law Enforcement Directive, NIS 2, the AI Act, the Data Act and the Digital Omnibus proposals.
• Part II, European data protection law and regulation (Ch 7–18): personal data and special categories; pseudonymous and anonymous data; controllers, processors and joint controllers; security of processing; breach notification; vendor management; access, rectification, erasure, restriction, objection and portability; consent; automated decision-making and profiling; restrictions on rights.
• Part III, European data processing (Ch 19–26): the principles; the six lawful bases, with a full chapter on legitimate interests; special category and criminal offence data; transparency and privacy notices; international transfers from adequacy and the Data Privacy Framework to SCCs, BCRs, derogations and transfer impact assessments.
• Part IV, Scope, accountability and enforcement (Ch 27–33): material and territorial scope; accountability and data protection by design; DPIAs; DPOs and audits; supervisory authorities, the one-stop-shop and the EDPB; remedies, fines, compensation and collective redress.
• Part V, Compliance in practice (Ch 34–41): employment; surveillance by public authorities; CCTV, geolocation and biometrics; direct marketing; online behavioural advertising; cookies, search marketing and cloud computing; social media, deceptive design and children; artificial intelligence and machine learning.
• Part VI (Ch 42): exam technique, common traps, numbers worth memorising and an integrated case study.
• Back matter: a 319-term glossary, five domain summary sheets, a GDPR article finder, a digest of about 90 CJEU and ECtHR judgments, a table of EDPB and Article 29 Working Party guidance, a bibliography of primary sources and an index.

Each chapter has learning objectives, worked examples, exam-focus boxes, key terms, a summary, two check questions and endnotes to the GDPR, the case law and EDPB guidance. Boxed status notes flag points that were changing at 1 October 2026, such as the Digital Omnibus proposals and the challenge to the EU–US Data Privacy Framework.

Does the book include practice questions?

Yes, kept short so the book stays a work of explanation: every chapter ends with two check questions and answers. All questions are original. For full-length practice, the CIPP/E Exam Prep Kit (Book + Mock Exams) adds a 90-page volume with a 150-question bank by domain and two timed 90-question mock exams, for ₹5,000 / US$59.

Who wrote this guide?

Apoorva Sharma is a lawyer based in Mumbai, India, with more than eight years of experience in data privacy (including India's Digital Personal Data Protection framework), Trust and Safety, and commercial and regulatory work at Uber, Junglee Games (Flutter Entertainment) and Adfactors PR.

Format and delivery

• Instant download after purchase: one ZIP file (about 2.7 MB).
• Searchable, printable PDF and an editable DOCX (Word) version.
• Text-only; no video is included.

Frequently asked questions

Is this an official IAPP CIPP/E study guide?

No. It is an independent, unofficial study guide written by Apoorva Sharma and is not affiliated with, endorsed by or sponsored by the IAPP. The Body of Knowledge was used only as a public topic map. Nothing is copied from IAPP textbooks, practice tests or examination items.

Is it up to date for 2026?

It states the law as at 1 October 2026 and covers recent developments including the CJEU's 2025 judgments in EDPS v SRB and Russmedia, the Latombe ruling on the Data Privacy Framework, the GDPR procedural regulation (EU) 2025/2518 and the Digital Omnibus proposals. Check official sources for later changes before the exam.

Should I buy the Book or the Book + Mock Exams kit?

Choose the Book for the full text and reference material. Choose the kit if you also want 330 original practice questions, including two timed 90-question mock exams weighted to the blueprint, with explanations that point back to the relevant chapter.

Disclaimer

Unofficial study guide. Not affiliated with, endorsed by, or sponsored by the International Association of Privacy Professionals (IAPP). CIPP/E is a trademark of the IAPP. All practice questions are original; no result is guaranteed. The material is educational and is not legal advice.