PIPP

Personal Information Protection Professional

Role certification · Compliance planning and management

CCRC role certification aligned with PIPL and GB/T 42446 for professionals managing personal information protection compliance.

Lawyers, auditors, consultants; enterprise legal, security, operations, product, compliance, and audit staff; government CDOs and data security leads
Training CNY 6,780/person (materials included) + exam/certification CNY 2,100/person
4 days
Online exam, 150 minutes; 70 single-choice + 10 multiple-choice + 1 short answer + 2 comprehensive questions; 120 points total, pass 84

Training Features

Authority

CCRC is an institution under SAMR authorized to deliver personnel certification, training, and certificate issuance.

Comprehensiveness

Covers legal requirements, hot-topic domains, compliance management systems, and data security fundamentals.

Forward-looking

Integrates international compliance frameworks, governance, policy systems, and risk monitoring.

Focus

Deep dives into impact assessment, compliance audit, privacy-by-design, security design, and data security.

Practicality

Blends knowledge, scenarios, cases, and practice to build risk identification and solution skills.

Curriculum

Day 1

  • A0 CCRC-PIPP course introduction
  • A1 Legal foundations of personal information protection
  • A2 Personal information processing rules
  • A3 Cross-border rules and data subject rights
  • A4 Obligations of personal information controllers
  • A5 Supervisory authorities and legal liability

Day 2

  • B4 Third-party personal information processing management
  • B5 Responding to data subject rights
  • B6 Personal information security incident response
  • C1 App personal information protection compliance
  • C2 Minors personal information protection
  • C3 Cross-border personal information compliance

Day 3

  • B1 Overview of personal information protection compliance management
  • B2 Building a personal information protection compliance system
  • C5 Personal information protection impact assessment
  • B3 Personal information protection compliance audit

Day 4

  • C4 Privacy design and privacy engineering
  • D1 Information and data security fundamentals (part 1)
  • D1 Information and data security fundamentals (part 2)
  • D2 Privacy-enhancing technologies and privacy computing
  • Review and Q&A

Course Modules

  1. A Legal foundations: PIPL essentials, processing rules, cross-border transfers, controller obligations
  2. B Compliance management: system design, third-party management, rights response, incident response, compliance audit
  3. C Implementation guidance: app compliance, minors protection, outbound transfers, impact assessment, privacy design
  4. D Technical protection: information and data security basics, privacy-enhancing technologies and privacy computing

After payment, training staff provides a registration code; complete CCRC online registration and exam fee payment before class starts.

Register on CCRC →