Know the principles
Explain the OECD Guidelines, APEC principles and fair information practices, and how personal data is defined across jurisdictions.
Partners and press
Overview
Asia has no single privacy regime. CIPP/A tests three of them in depth.
CIPP/A is IAPP’s Asia privacy credential, starting from privacy principles, including the OECD Guidelines and APEC principles. It covers Singapore’s PDPA, Hong Kong’s PDPO and India’s Digital Personal Data Protection Act 2023, and compares them. IAPP’s blueprint puts domains II, III and IV at 78% of the exam, and its handbook says CIPP/A is not ANAB accredited.
10Modules
90Questions
150Minutes
8Roles
What it tests
Learn all the way down.
Learn all the way down.
Perform when it matters.
Apply Singapore’s PDPA
Apply the PDPA, including the Do Not Call Registry and employment rules, and know how it is enforced.
Apply Hong Kong’s PDPO
Apply the six data protection principles and the direct marketing guidance, and know the Commissioner’s enforcement role.
Apply India’s DPDPA
Apply the Digital Personal Data Protection Act 2023, including children’s data, exemptions and the Data Protection Board.
Course outline
Three privacy regimes across Asia,
Three privacy regimes across Asia,
one comparative method.
We design this course ourselves. IAPP runs the exam and issues the credential, and LUNARTECH is independent of IAPP.
Asian privacy laws grew from shared international models. You study fair information practices, the OECD Guidelines and the APEC Privacy Framework, and learn how these principles show up in national laws.
- Fair information practices and their origins
- The OECD Guidelines
- The APEC Privacy Framework
- Cross-border privacy rules
- Accountability as a common thread
- Comparing principle-based and rights-based laws
You build A table that traces five common principles through the OECD, APEC and three national laws.
Definitions and transfer rules decide where a law bites. You compare how personal data is defined, what makes a regime adequate for transfers, and how regional and global frameworks fit together.
- What counts as personal information
- Sensitive and special categories of data
- Adequacy and how it is assessed
- Transfer mechanisms in the region
- How European rules influence Asian laws
- Mapping a regional data flow
You build A data flow map that marks where each of the three laws applies.
Singapore’s Personal Data Protection Act is a principle-based law covering private organizations. You apply its consent, purpose, notification, access, care and retention obligations, and the role of the data protection officer.
- Singapore’s legal and political context
- Scope of the PDPA and who it covers
- Consent, deemed consent and exceptions
- Purpose limitation and notification
- Access, correction, accuracy and protection
- Retention, transfer limitation and accountability
- Data protection officers and policies
You build A PDPA compliance review of an online service.
The PDPA has specific rules for marketing and employment, and an active regulator. You apply the Do Not Call Registry, handle employee data, manage breach notification, and learn how the PDPC investigates.
- The Do Not Call Registry and marketing messages
- Employment: recruitment, employees and evaluations
- Data breach notification
- The PDPC’s investigation and enforcement powers
- Financial penalties and directions
- Reading PDPC decisions
You build A marketing and employee data procedure that meets Singapore’s rules.
Hong Kong’s Personal Data (Privacy) Ordinance organizes its duties into six principles. You learn what each requires, how the Commissioner reads them, and how they apply from collection through to access.
- Hong Kong’s legal background
- Scope and definitions in the Ordinance
- DPP1: purpose and manner of collection
- DPP2 and DPP3: accuracy, retention and use
- DPP4 and DPP5: security and openness
- DPP6: access and correction
- Cross-border transfer rules and their status
You build A principle-by-principle compliance table for a Hong Kong retailer.
Direct marketing carries its own rules under the Ordinance. You apply the notice and opt-out requirements, learn how the Commissioner investigates and enforces, and study the offences that can follow.
- Direct marketing: notice, consent and opt-out
- Using or selling personal data for marketing
- The Commissioner’s complaint and inspection powers
- Enforcement notices and offences
- Codes of practice and guidance
- Data breach handling guidance
You build A direct marketing consent and opt-out procedure that meets the Ordinance.
India’s DPDPA 2023 is a consent-centered law. You learn who counts as a Data Principal and a Data Fiduciary, the lawful grounds for processing, notice duties, and the extra duties of significant data fiduciaries.
- India’s legal background and the right to privacy
- Scope, applicability and key definitions
- Consent, notice and consent managers
- Legitimate uses without consent
- Data fiduciary obligations and security safeguards
- Significant data fiduciaries and their extra duties
You build A consent and notice design for an Indian service, mapped to the Act.
The Act gives rights to individuals and sets special rules for children, with wide exemptions for the state. You apply those rules and learn how the Data Protection Board decides disputes and imposes penalties.
- Rights of the Data Principal
- Children’s data and verifiable parental consent
- Cross-border transfer rules under the Act
- Exemptions for the state and other cases
- The Data Protection Board and its procedures
- Penalties and voluntary undertakings
You build A rights and children’s data procedure for an Indian service.
Placing the laws side by side shows what is shared and what is not. You compare children’s data, breach notification, data subject rights, surveillance and enforcement across Singapore, Hong Kong and India.
- Comparing definitions and scope
- Data subject rights compared
- Children’s data compared
- Breach notification compared
- Surveillance and government access compared
- Enforcement models compared
You build A comparison matrix of the three laws, with a note on where each is strictest.
A company wants to run one program across three markets. You assess its operations, find the strictest common standard and the local exceptions, and design a regional approach to notices, consent, breaches and rights.
- Mapping operations and data in the three markets
- Setting a common baseline and local variations
- Designing consent, notices and rights handling
- Planning breach notification across jurisdictions
- Presenting the program to regional leadership
You build A regional privacy program design for a company operating in Singapore, Hong Kong and India.
Issued by
Certifying body · Independent of LUNARTECH
IAPP
IAPP is a not-for-profit association for privacy, AI governance and digital responsibility professionals, founded in 2000. Its exams are delivered through Pearson VUE, in person or online, and holders renew every two years with CPE credits. LUNARTECH is independent of IAPP.
How you get there
Top-tier roles go to people who can do the work.
Top-tier roles go to people who can do the work.
Here’s how you get there.
Know where you start.
Privacy level. Check IAPP’s official page for what it expects before you begin.
Work through the course.
Ten modules, designed by LUNARTECH, at your own pace.
Sit it with IAPP.
IAPP runs the exam and issues the credential, so you register and book directly with them.
Support
Support at every stage.
Support at every stage.
You won’t be working through this alone.
Before you start
Try it first.
A 3-day free trial opens a selection of the content. Your card is only charged once it ends.
While you learn
Mentors within reach.
Stuck on a concept? Reach out to a mentor whenever you need help.
While you learn
One-on-one sessions.
On the yearly plan, one-on-one sessions give you dedicated support.
Any time
A team behind you.
Write to info@lunartech.ai at any point, from your trial onwards. If your employer is funding you, we’ll set it up with them directly.
All the way through
A schedule that fits around your life.
Your own paceFrom anywhereAt any hour
After the last lesson
Stay in the network.
Your alumni network stays with you: ongoing support, opportunities and industry insight.
Career support
Career support, past the last lesson. Coaching, a sharper resume, real interview preparation and the people to know.
Career direction
Tailored coaching helps you decide where to aim and how to get there.
Strong portfolio
Hands-on projects become work you can show, not just claim.
Resume and profile
Personalized refinement, so what you send says what you can actually do.
Interview preparation
Preparation for the questions that decide it, so you walk in ready.
Network and search
Connections with industry leaders, and an alumni network that stays with you.
Reviews
Real stories from the community.
LUNARTECH Academy has been the most empowering learning experience of my life, giving me a clear, structured path from the absolute basics to building real-world AI systems with confidence.
Your page is fantastic. As a bachelor’s student in Data Science now accepted for a master’s at UConn, your work has been a real source of motivation.
The programme’s clear, bite-sized content and practical projects dramatically improved my speed from fuzzy idea to MVP and my ability to communicate AI value. I followed the system, and it works.
I really appreciate your teaching style and the way you break down complex topics. It has been incredibly helpful.
After years working mainly with R for econometrics, I found your Python machine learning course a refreshing and engaging way to learn Python.
As a Data Science graduate, I want to thank you for the effort you put into making videos to support growing data scientists.
I’ve been following your work since taking your machine learning course, and I’m impressed by your practical approach to applying AI.
Why choose us
Built around how you actually learn.
One standard behind every course, from the first lesson to long after the last.
Hands-on practice
Apply every idea to real problems, so it becomes something you have used, not only seen.
Industry-aligned curriculum
We keep courses current with the tools, techniques and skills the field asks for.
Flexible learning
Study at your own pace, from anywhere, at any hour.
Certificate of completion
Finish the course and earn a certificate that shows what you have learned.
Focus on your success
Personalized learning plans and support structures carry you through the hard parts.
Lifetime alumni network
Stay connected after you finish, with ongoing support, opportunities and industry insight.
Your certificate
It doesn’t raise its voice. Neither will you.
Finish a LUNARTECH course and its certificate is issued in your name, under our signature. IAPP’s credential comes from IAPP, when you pass its exam.
Certificate of completion
Your Name
CIPP/A course
LUNARTECH RISE Academy
Pricing
This course comes with the membership.
This course comes with the membership.
So does everything else.
One membership opens every course, certification, workshop and masterclass in the Academy. Every plan starts with a 3-day free trial. You register and book the exam directly with IAPP.
3 days free, then $29.97 a month. Your card is only charged once the trial ends.
Included in every plan
- Every course in the Academy
- Every certification course
- Workshops and masterclasses
- A certificate of completion
- A 3-day free trial
- Learning at your own pace
- The lifetime alumni network
- Upgrades at any time
In practice
Eight roles.
Eight roles.
One credential across them all.
No single job owns it. Here’s where each role leans hardest, and where its work ends up.
- 01Fundamentals
- 02Singapore
- 03Hong Kong
- 04India
- 05Common themes
-
One regional program must satisfy three regimes. Domain five compares them directly.
Singapore, Hong Kong, India, Common themes
Multinational companies, Privacy offices
-
Each jurisdiction has its own regulator and rules. Enforcement is covered for all three.
Singapore, Hong Kong, India
Law firms, Privacy offices
-
Cross-border data flows are the daily problem. Fundamentals and comparisons cover it.
Fundamentals, Common themes
Multinational companies, Technology companies
-
Singapore and Hong Kong differ in the details. The exam tests the details.
Singapore, Hong Kong
Financial services, Multinational companies
-
One app may launch in Singapore, Hong Kong and India together. Comparing the three laws shows what to build once.
Common themes, Singapore, India
Technology companies, Multinational companies
-
Each law sets its own enforcement, and your response must fit. Common themes help you build one process for all three.
Singapore, Hong Kong, India
Multinational companies, Financial services
-
Offshore vendors bring local privacy law into your contract. Common themes show which clauses carry over.
Common themes, Fundamentals
Multinational companies, Financial services
-
A group-wide policy needs the principles all three share. Fundamentals cover the OECD and APEC base.
Common themes, Fundamentals
Privacy offices, Multinational companies
- Privacy offices
- Law firms
- Multinational companies
- Technology companies
- Financial services
Regional Privacy Manager
One regional program must satisfy three regimes. Domain five compares them directly.
Over 10,000 students trust LUNARTECH
LUNARTECH gives you the skills
to learn, build, create and lead.
Engineers
Understand systems all the way down. Build the ones others rely on.
Scientists
Understand what the data says. Build models that hold up.
Researchers
Understand the papers. Build on them, and take the work further.
The field
Anyone can use AI.
Anyone can use AI.
Few can engineer it. This is where that starts.
+340%growth in open roles requiring AI skills
Roles and pay
~35,000 open roles right now
Open roles: Built In, Greenhouse, LinkedIn.
Typical salaries: Glassdoor, Levels.fyi, Payscale, Indeed, Ravio, JobRise, U.S. BLS. Military: 2026 U.S. basic pay, drone officers with aviation incentive pay.
Updated November 2026.
FAQ
Frequently asked questions.
Need help? These answers cover most of what people ask before they start.
No. IAPP issues it. LUNARTECH is independent of IAPP, and its names and marks belong to it. When you finish a course of ours, you earn a LUNARTECH certificate of completion for that course.
No. We design this course ourselves, around what the exam covers. IAPP has no part in it, and you still register and book the exam directly with IAPP.
90 questions, 150 minutes, test center or online. The passing score is 300 on a 100–500 scale.
2 years. Every two years: 20 CPE hours and the maintenance fee (waived for IAPP members), or retake the exam.
We last reviewed it on 5 November 2026, from IAPP’s own pages. Details change, so check the official page before you book.
Our 3-day free trial gives you access to a selection of content in the bootcamps, courses and materials, so you can experience the value of our content first-hand. This includes comprehensive learning materials and interactive sessions. You won’t be charged during this period, though we require your credit card details at the start to ensure a seamless transition should you choose to continue.
Yes, entering your credit card details is a necessary step to begin your free trial. The process is entirely secure, and we ask for it to provide a seamless transition to a paid subscription if you decide to continue beyond the trial. You will only be charged after the trial period ends, with full access to our content based on the plan you choose.
After your 3-day free trial you gain access to the full breadth of our content, depending on the subscription plan you choose. We offer free trials for our monthly, bi-annual and annual plans, and each plan provides a different scope of access and benefits.
If your employer has agreed to fund your learning, in part or in full, please contact us at info@lunartech.ai. We’ll work with you and your employer to set up everything needed for your subscription.
Yes. Our support remains strong both during your free trial and after you subscribe. Reach the team at info@lunartech.ai with any question, whether you’re onboarding, navigating your trial, or need help as a member. Subscribers to the yearly plan also receive dedicated support in one-on-one sessions.
You can upgrade your plan at any time during your subscription. Downgrading is not available for bi-annual or annual plans, but you can cancel and then choose a new plan that suits you better. For bi-annual and annual plans we also offer payment in instalments; please reach out to learn more.
The course
Build the skills behind CIPP/A.
Prove you can apply privacy law in Singapore, Hong Kong and India. Start with a free trial, or enroll in a plan and work through the course at your own pace. IAPP runs the exam and issues the credential.
LUNARTECH is independent of the vendors and certifying bodies listed here. Their names, exam titles and marks belong to them, exams are run by them, and credentials are issued by them. Reviewed 5 November 2026. Catalogues change often, so confirm the details on the official page before you book.
