Certified Information Privacy Manager (CIPM)
Who Should Attend?
This course is ideal for:
Training Partners


LATEST UPDATE
Participants are required to attain a minimum of 75% training attendance and pass the associated assessment in order to be eligible for course fee funding. Click here for more information.
NEXT INTAKE INFORMATION
17 – 19 Aug 2026 [Open for Registration]
Mode of Delivery: In-person
*Online registration will close 5 calendar days before the course start date or once the maximum class size is met, whichever comes first.
Looking to pursue an international certification in data privacy?
Join us at the IAPP – Certified Information Privacy Manager (CIPM) programme, the world’s first and only certification in personal data protection programme management. The programme, developed by the International Association of Privacy Professionals (IAPP), was brought to Singapore by Straits Interactive.
Our leading data protection practitioners have been delivering this training since 2014 to thousands of participants, both from the private and public sector, as well as to government regulators across ASEAN. Be inspired by the many real-life examples quoted from the best-selling book “99 Privacy Breaches to Beware of” authored by our pool of lead trainers.
The CIPM training comprises of six domains:
Domain I: Privacy Program Governance
Provides a solid foundation for the governance of a privacy program and defines how the privacy program may be developed, measured and improved.
Domain II: Privacy Program Framework
Focuses on the management and operations of the privacy program governance model within the context of the organization’s privacy strategy
Domain III: Privacy Program Operational Life Cycle – Assessment
Details important components supporting the assessment or analysis of an organizations privacy regime.
Domain IV: Privacy Program Operational Life Cycle – Protect
Outlines the protection of assets through the implementation of industry-leading privacy and security controls and technology
Domain V: Privacy Program Operational Life Cycle – Sustain
Details how the privacy program is sustained through communication, training and management actions
Domain VI: Privacy Program Operational Life Cycle – Respond
Provides information and solid foundation regarding the response to privacy incidents
Participants who wish to sit for the examination offered by IAPP can purchase a one-time exam voucher at a special rate directly from Straits Interactive. Please refer to Fee/Funding tab for more details.
Details
PRE-REQUISITE
This is not a foundation course, participants are expected to have the following pre-requisites:
• Good knowledge of data protection; and
• Tertiary level qualifications; and/or
• At least 2 years of working experience
Privacy program strategy development
Identity privacy program manager responsibilities.
Manage risk throughout the data life cycle.
Create a program framework.
Evaluate privacy technology vendors.
Understand governance, risk management, auditing and compliance.
• Comprehend key global privacy and data protection laws, regulations and standards.
• Comply with cross-border data transfer regulations.
• Respond to data subject requests.
• Map and inventory data.
• Use privacy impact assessments and data protection impact assessments.
• Accommodate privacy-related human resources concerns.
• Develop policies for privacy, information security, acceptable use, data retention and destruction.
• Understand the benefits inherent in proper privacy and data protection training.
• Establish data protection training and awareness programs.
• Implement and evaluate security, access and technical privacy controls.
• Adopt privacy-by-design practices.
• Distinguish privacy and security incidents from breaches.
• Detect, investigate, report and recover from privacy and security breaches.
• Know your audience.
• Examine four types of metrics.
• Audit a privacy program in five phases.
The CIPM body of knowledge outlines all the concepts and topics that you need to know to become certified.
• Lecture style
• Video clips
• Discussions with consultants
•Role play / presentations
As part of the requirement for SkillsFuture Singapore, there will be an assessment conducted at the end of the course. The mode of assessment, which is up to the trainer’s discretion, may be an online quiz, a presentation or based on classroom exercises.
Participants are required to attain a minimum of 75% attendance and pass the associated assessment in order to receive a digital Certificate of Participation issued by Singapore Management University.
For more information on assessment and re-assessment policy, click here.

Straits Interactive is an Official Training Partner of the International Association of Privacy Professionals (IAPP).
Our trainers have been actively engaged in doing actual PDPA audits of Singaporean companies for Straits Interactive, and are certified by IAPP to conduct the CIPM course. Together, the team has also trained thousands of participants in the Personal Data Protection Act.

Dr Kevin Shepherdson
Fellow of Information Privacy,
CIPM, CIPP/A, CIPP/E, CIPT, Exin (GDPR, Infosec), GRCP
Kevin provides and drives the vision, strategy and innovation of the company’s Data Privacy, GRC (Governance, Risk Management & Compliance), Data Governance and Gen AI offerings that build upon the foundation of enabling trusted businesses and responsible marketing. He has also attained his Doctorate of Business Administration (DBA) specialising in Generative AI from Golden Gate University. Previously, Kevin had a successful career riding on market and tech trends with leading MNCs in multimedia (Creative), Internet/Java (Sun) and Database/Cloud technology (Oracle). He is also the author of the books “99 Privacy Breaches to Beware of”, “The AI Factory” and “AI Ethical Breaches to Be Aware Of”. In 2021, Kevin was awarded the SkillsFuture Fellowship in recognition of his commitment to lifelong learning and skills mastery.

Dr Celine Chew
Fellow of Information Privacy,
CIPM, CIPP/A, CIPP/E, CIPT, AIGP, EXIN (GDPR, Infosec), GRCP
As a Certified Information Privacy Manager (CIPM), Celine provides insights into the behavioural change and learning required for teams to embrace change initiatives. She offers comprehensive training for Data Protection Officers (DPOs) and companies, propelling digital transformation in data protection and governance. She has attained her DBA I Generative AI and also has extensive training experience internationally and specialises in the social, emotional and cognitive aspects of learning. She is also an executive coach to senior executives in multinational and regional companies.

William Hioe
Fellow of Information Privacy,
CIPM, CIPP/A, CIPP/E, CIPT, GRCP
William Hioe, who is a Certified Information Privacy Manager (CIPM), brings with him more than three decades of ICT experience in the government and public sector, first as an assistant director in Systems & Computer Organisation, MINDEF, and then as a senior director of strategic planning at the National Computer Board (NCB) / Infocomm Development Authority of Singapore (IDA). Currently, he is the managing director of Cynergie Consulting Pte Ltd, a company founded by him to offer consultancy and training services in strategic ICT planning, strategy development, policy formulation and enterprise architecting.

Lyn Boxall
Fellow of Information Privacy,
CIPM, CIPP/A, CIPP/E, GRCP, GRCA
She is one of the co-authors of “99 Privacy Breaches to Beware of” and specializes in data protection and information security, and practices general commercial law for a wide range of local and international clients as well. She holds international certifications in privacy/data protection awarded by the International Association of Privacy Professionals (IAPP), namely, Certified Information Privacy Manager (CIPM), Certified information Privacy Professional, Asia (CIPP/A), Certified Privacy Professional, Europe (CIPP/E) and Fellow of Information Privacy (FIP). She is also certified by Exin (the global independent certification institute for ICT Professionals) as a Privacy and Data Protection Practitioner.

Edwin Concepcion
Fellow of Information Privacy,
CIPM, CIPP/US, CIPP/E, CIPT, AIGP
Certified Lead Implementer in ISO/IEC 27001 , ISO/IEC 27701, ISO 37301
PECB Certified Trainer for ISO/IEC 27001 , ISO/IEC 27701, ISO 37301
Edwin is the Head of the Data Protection-as-a-Service unit. As an international trainer and consultant, he provides privacy and data protection training, consulting and advisories to various organizations which include retail and hospitality, publishing, education, telcommunications and others. He has more than 20 years of experience in the IT industry in various management roles from enterprise solutions, marketing and product management.

Chen Hwee Ling
Fellow of Information Privacy,
CIPP/A, CIPM, CIPT, EXIN(GDPR), M(IS), M(Ed), Adv Cert (DPOE), Adv Cert (GRDC)
Trainer, Straits Interactive
Hwee Ling is a Certified Information Privacy Manager, Certified Information Privacy Technologist and Certified Information Privacy Principles (Asia). As an educator and engineer of information systems for more than thirty years, Hwee Ling has extensive experience working in areas such as Information Technology Service Management, Software Development, Data Analytics, Machine Learning and Robotic Process Automation. With upward trend of automation and digitalization of business operations, Hwee Ling brings insights to help organisation understand and mitigate data protection as well as information security risks.

Nicholas Cheong
Fellow of Information Privacy,
CIPM, CIPT, CIPP/A, CIPP/E, GRCP
Trainer, Straits Interactive
Nick is a Certified Information Privacy Manager (CIPM) and a Certified Information Privacy Professional (CIPP) for Europe and Asia, certified by the International Association of Privacy Professionals (IAPP). He has also been certified by the Open Compliance and Ethics Group (“OCEG”) as a Governance, Risk and Compliance Professional (GRCP) and GRC Auditor (GRCA).
Nick has benefited from 25 years of legal practice, managing risks as a diving instructor and as a drug supervision officer. He is from the first batch of PDPC approved trainers when PDPC first launched its data protection course. He has provided data protection training and consultancy since 2014.
Fees & Funding
COMPANY-SPONSORED
PARTICIPANT PROFILE
SELF-SPONSORED
SME
NON-SME
Singapore Citizen < 40 years old
Permanent Resident
LTVP+
$1,177.20
After SWDA Funding 70%
$1,177.20
After SWDA Funding 70%
Singapore Citizen ≥ 40 years old
International Participant
$3,924.00
(No Funding)
$3,924.00
(No Funding)
$3,924.00
(No Funding)
Please note that prices listed above are inclusive of the new 9% GST, applicable from January 1, 2024.
IAPP CERTIFICATION EXAM PURCHASE
The IAPP Certification exam is NOT included in the course fees. However, an exam coupon code for S$130.80 (including GST) can be purchased from Straits Interactive to redeem the IAPP exam voucher for the course completed.
Terms & conditions:
• The special offer is available only to class participants and is non-transferable.
• This limited-time offer is available for 7 days from and inclusive of the 3rd day of the class.
• Payment must be made within 3 working days from the date of invoice issuance. Once payment is made, a unique coupon code tagged to the registered IAPP account email will be provided and is valid for 30 days.
• The exam voucher redeemed thereafter is valid for 12 months from the date it is issued.
• Exam coupon code once sold is non-refundable and non-transferable.
• This special price only applies to the first exam attempt and does not apply to exam retakes.
More details will be shared on the 3rd day of the class.
The IAPP Certification Exam is not funded by SSG, and the course fee does not include the exam voucher. Consequently, the coupon code purchased from SI for the IAPP exam is not eligible for reimbursement with SkillsFuture Credits.
Post Secondary Education Account (PSEA)
PSEA can be utilised for subsidised programmes eligible for SkillsFuture Credit support. Click here to find out more.
SELF SPONSORED
# SkillsFuture Credit
Singapore Citizens aged 25 and above may use their SkillsFuture Credits to pay for the course fees. The credits may be used on top of existing course fee funding.
This is only applicable to self-sponsored participants. Application to utilise SkillsFuture Credits can be submitted when making payment for the course via the SMU Academy TMS Portal, and can only be made within 60 days of course start date.
Please click here for more information on the SkillsFuture Credit. For help in submitting an SFC claim, you may wish to refer to our step-by-step guide on claiming SkillsFuture Credits (Individual).
# Workfare Skills Support Scheme
Workfare Skills Support (WSS) Scheme in replacement of Workfare Training Support (WTS) Scheme:
From 1 July 2023, the Workfare Skills Support (WSS) scheme has been enhanced. Please click here for more details.
COMPANY SPONSORED
# Enhanced Training Support Scheme
• Organisation must be registered or incorporated in Singapore
• Employment size of not more than 200 or with annual sales turnover of not more than SGD100 million
• Trainees must be hired in accordance with the Employment Act and fully sponsored by their employers for the course
• Trainees must be Singapore Citizens or Singapore Permanent Residents
• Trainers must not be a full-time national serviceman
• Trainees will be able to enjoy ETSS funding only if the company’s SME’s status has been approved. To verify your SME’s status, please click here.
# Absentee Payroll
Companies who sponsor their employees for the course may apply for Absentee Payroll here.
For more information, please refer to:
• AP Guide (Non-SME Companies)
• Declaration Guide (SME Companies)
# SkillsFuture Enterprise Credit (SFEC)
This course is eligible for SFEC funding. Companies should check their SFEC eligibility on the Business Grant Portal.
Testimonials

Certified Information Privacy Manager (CIPM)
$ SGD 3924
This course includes:

