All 4 domains
58 official performance indicators
58–76 hrs suggested study
-
Domain 01
~21%
Domain I sets up the governance program itself: what AI is and why it creates distinct risks, the principles of responsible AI, who owns which decisions, how teams work together, and the policies that run across the AI life cycle.
Inside this domain
- Know the generally accepted definitions and types of AI
- Identify the types of risks and harms posed by AI to individuals, groups, organizations and society
- Identify the unique characteristics of AI that require a comprehensive approach to governance
- Identify and apply the common principles of responsible AI
- and 8 more performance indicators
Watch for Ban instead of govern
- Performance indicators
- 12
- Questions est.
- ~18 of 85 (IAPP range 16–20) questions
Read the domain guide →
-
Domain 02
~25%
Domain II covers the legal and standards landscape for AI: how privacy law applies to training and inference, how IP, nondiscrimination, consumer protection and product liability law reach AI, the EU AI Act's risk-based rules, and the OECD, NIST and ISO frameworks.
Inside this domain
- Understand how transparency, choice, lawful basis and purpose limitation requirements apply to AI
- Understand how data minimization and privacy by design requirements apply to AI
- Understand how obligations on data controllers apply to AI
- Understand the requirements that apply to sensitive or special categories of data (e.g., biometrics)
- and 13 more performance indicators
Watch for Chatbot equals high risk
- Performance indicators
- 17
- Questions est.
- ~21 of 85 (IAPP range 19–23) questions
Read the domain guide →
-
Domain 03
~27%
Domain III follows an AI system through development: defining the use case, assessing impact, applying policy to design, governing training and test data, documenting each step, then releasing, monitoring, auditing and disclosing the system responsibly.
Inside this domain
- Define the business context and use case of the AI system
- Perform or review an impact assessment on the AI system
- Apply the policies, procedures, best practices and ethical considerations to designing and building the AI system
- Identify and manage the internal and external risks and contributing factors related to designing and building the AI model and system
- and 12 more performance indicators
Watch for Monitor it later
- Performance indicators
- 16
- Questions est.
- ~23 of 85 (IAPP range 21–25) questions
Read the domain guide →
-
Domain 04
~27%
Domain IV governs AI an organization decides to put into use: weighing context, model types and deployment options, assessing the selected system and its vendor terms, then monitoring, documenting, communicating and, when needed, switching it off.
Inside this domain
- Understand the context of the AI use case
- Understand the differences in AI model types
- Understand the differences in AI deployment options
- Perform or review an impact assessment on the selected AI system
- and 9 more performance indicators
Watch for Vendor audit is enough
- Performance indicators
- 13
- Questions est.
- ~23 of 85 (IAPP range 21–25) questions
Read the domain guide →
Domain names, weights and performance indicators come from IAPP's official outline (AIGP Body of Knowledge and Exam Blueprint v2.1 (effective 2 February 2026, current)). Question counts and study hours are editorial planning estimates, not official figures. Last reviewed October 2026.