Is the AIGP exam hard?
It is a demanding exam, but not a mysterious one. The AIGP exam has 100 multiple-choice questions in 165 minutes, so you have about 99 seconds per question. IAPP scores it on a 100 to 500 scale with 300 as the passing score, and it does not publish a pass rate. What makes it hard is breadth and application, not trick questions. This page explains where the difficulty actually sits and how to prepare for it.
What the exam looks like
| Measure | AIGP exam |
|---|---|
| Questions | 100 multiple choice, including scenario questions |
| Time | 165 minutes, about 99 seconds per question |
| Scoring | Scaled 100 to 500, 300 to pass |
| Pass rate | Not published by IAPP |
| Subject | AI governance: foundations, the EU AI Act and other laws, standards such as the NIST AI RMF and ISO/IEC 42001, and governance across the AI life cycle |
Check the current IAPP AIGP certification page before you book: the format and blueprint are updated from time to time.
Where the difficulty really is
- It spans law, technology and management. One question may ask about a machine-learning concept, the next about the EU AI Act's risk tiers, the next about an impact assessment. Candidates from a single background find at least one of these unfamiliar.
- The material is new and still moving. The blueprint was revised for 2026 and the AI Act's obligations phase in over several years. You need the current outline, not last year's notes.
- Framework vocabulary. NIST AI RMF functions, ISO/IEC 42001 clauses, OECD principles and the AI Act's roles (provider, deployer, importer, distributor) use overlapping words for different things.
- Life-cycle reasoning. Questions often ask what should happen at a particular stage, from planning and data collection to monitoring after deployment.
What makes it manageable
- The outline is public and the four domains are evenly weighted, so a balanced study plan works.
- There is no single statute to memorise article by article. The exam rewards understanding of how frameworks fit together more than recall of numbering.
- Time is generous. At around 100 seconds per question, most candidates are not under pace pressure.
- Privacy professionals already know a large part of Domain II from the GDPR and other privacy law.
How the questions are weighted
The published blueprint gives each domain a range of questions. Study time should follow these weights, not the order of a textbook.
| Domain | Questions |
|---|---|
| I. Understanding the foundations of AI governance | 16–20 |
| II. Understanding how laws, standards and frameworks apply to AI | 19–23 |
| III. Understanding how to govern AI development | 21–25 |
| IV. Understanding how to govern AI deployment and use | 21–25 |
Source: IAPP AIGP Body of Knowledge and Exam Blueprint.
Find out how hard it will be for you
The honest answer depends on where you start. Someone who applies this law at work will find the vocabulary familiar and the scenarios natural; someone coming from a different field will need longer on the foundations. The fastest way to know is to answer ten exam-style questions and look at the result by domain.
Take the free ten-question diagnostic
How to prepare
- Diagnose first. Use the diagnostic to see which domains need the most work, then read the free lessons for those areas before anything else.
- Study the whole outline, weighted. Give the heaviest domains the most time. The four-week study plan is built around the blueprint weights.
- Practice application, not recall. Exam questions describe a situation and ask for the best next step or the controlling rule. Work through exam-style questions with explanations and review every wrong answer.
- Finish with timed practice. A full timed set shows whether you can hold the pace for 100 questions and where you slow down. The practice exam page explains how to use it.
Related lessons
- What is AI? Definitions the exam uses
- The EU AI Act risk classification framework
- The four regulated roles under the AI Act
- NIST AI Risk Management Framework
- AI impact assessments
Sources and study method
This independent study material uses the current published AIGP outline, active recall, spaced retrieval and scenario practice. Read the full method. Current sources. IAPP AIGP certification page, IAPP AIGP Body of Knowledge and Exam Blueprint.
Frequently asked questions
What is the passing score for the AIGP exam?
IAPP reports AIGP results on a scaled score from 100 to 500, and 300 is the passing score. The number of correct answers needed for 300 is not published because it depends on the form of the exam you sit.
What is the AIGP pass rate?
IAPP does not publish pass rates for its certification exams. Any percentage you see on other sites is an estimate, not an official figure.
How long does it take to prepare for the AIGP exam?
It depends on your starting point. Our study plan is four weeks at about five hours a week for someone with some background in the subject. Take the free diagnostic first; if you score low across most domains, plan for longer.
Is the AIGP exam harder than the CIPP/E?
They test different material rather than different levels. Candidates usually find the exam covering the law they already work with easier. The format is similar: multiple choice, scenario questions and a 300 pass mark on a 100 to 500 scale.
Can I retake the AIGP exam if I fail?
Yes. IAPP publishes its current retake rules, waiting period and fees on the certification page. Check those before rebooking, and use your score report to target the weakest domains.