Developer docs
API playgroundTry for free, no card

Search company profiles

IAPP

Full company profile

uuid00so12e

Namestring
IAPP
Legal namestring
The International Association of Privacy Professionals, Inc.
Websiteurl
iapp.org
Company typeenum
Private
Founded yearint
2000
Descriptiontext

IAPP (International Association of Privacy Professionals) is a policy-neutral, not-for-profit professional association founded in 2000, headquartered in Portsmouth, New Hampshire, with regional offices in Brussels (EMEA) and Sydney (ANZ). The organization serves as the global professional home for privacy, AI governance, and digital responsibility practitioners, with 90,000+ members across 160+ local KnowledgeNet chapters in 167 locations worldwide. Its primary professional domains are privacy, AI governance, and cybersecurity law, and it operates across individuals, organizations (including Fortune 100 enterprises), and government segments.

IAPP's product portfolio is not a single software platform but rather a credentialing-and-content ecosystem. Core offerings include a portfolio of certifications (CIPP/E, CIPP/US, CIPP/A, CIPP/C, CIPM, CIPT, FIP, and the AIGP for AI governance), certification-aligned training programs, and more than 845 resources such as legislative trackers, transfer impact assessment templates, research reports, and on-demand web conferences. Major events include the Global Summit (Washington D.C.), Privacy. Security. Risk.+AI Governance Global, AI Governance Global Europe, Europe Congress, Asia Forum, and ANZ Summit. Distribution channels include direct e-commerce via the IAPP Store, Pearson VUE for global exam delivery, training partners, and corporate/organizational membership programs. Marketing and member engagement are supported through Marketo, Google Analytics, and a multi-channel newsletter system (Daily Dashboard, AI Governance Dashboard, regional digests).

Revenue is generated through multiple recurring and one-time streams: annual individual and organizational membership fees, bundled training and certification exam purchases, conference registration, product sales (books, digital resources, practice exams, merchandise), and research/subscription content. Specific pricing is not publicly disclosed, but IAPP operates a credit-based refund policy rather than cash refunds for canceled events and products. The organization is governed by a board and membership structure, with no venture capital, private equity, or institutional ownership indicated in the source materials.

Short descriptiontext

IAPP is a policy-neutral, not-for-profit professional association founded in 2000 that serves as the global professional home for 90,000+ privacy, AI governance, and cybersecurity law practitioners across 160+ chapters, offering certifications, training, conferences, and research resources.

Operating statusenum
Operating
Ownership categoryenum
Headcount rangeband
51–100
akta.pro rankint
HeadquartersPortsmouth, United States
HQ citystring
Portsmouth
HQ countrystring
United States
HQ regionstring
North America
Markets served

Serves global market

Offices3 records

Each record includes

City, Country, Type, Description, Source

Keyword5 values
privacy certification programs, AI governance certification, professional membership services, data protection conferences, privacy professional training
Industry3 codes
1AI Governance, Risk & Compliance (GRC) Platforms
CodeHDAAAMAAPrimaryYes
2Responsible AI, Security & Privacy Platforms (Safety, Guardrails, PII)
CodeHDAEANAGPrimaryNo
3Regulatory Readiness & Audit Automation (e.g., EU AI Act, NIST AI RMF, ISO/IEC 42001)
CodeHDAAAMAEPrimaryNo
NAICS code1 code
  • Professional Organizations81392
SIC code1 code
  • Services-Membership Organizations8600
Product category
Privacy and AI Governance Professional Certification
Social media profiles2 records
GTM motion3 records

Each record includes

Type, Description, Source

Revenue model5 records
1Membership Fees
TypeSubscription Recurring
Description

Annual professional membership providing access to resources, research, community, and discounts on training and events. Available for individuals and organizations.

iapp.org
2Conference Registration
TypeOne Time License
Description

Fees for attending IAPP conferences including Global Summit, regional congresses, and specialized summits. Registration fees are not refundable but account credits are provided.

iapp.org
3Training and Certification
TypeSubscription Recurring
Description

Certification training, exam fees, and online training courses. Includes certification preparation courses and ongoing professional education (CPE credits).

iapp.org
4Publications and Research
TypeSubscription Recurring
Description

Access to member-exclusive reports, salary surveys, and research publications. Some resources are free while others require membership.

iapp.org
5Product Sales
TypeOne Time License
Description

Sale of print books, digital books, practice exams, and merchandise through the IAPP store. Credits issued for refunds rather than cash refunds.

iapp.org
Marketing channels11 records

Each record includes

Title, Type, Stage, Description, Source

Distribution channels6 records

Each record includes

Title, Type, Scope, Target buyer, Description, Source

Cost components6 values
Personnel, Operations, Marketing or Sales, Technology or R&D, Infrastructure, Others
Pricing details4 tiers
1Conference registration with credit policy
ModelOne time/ perpetual licenseBilling cadencePay-as-you-go
Notes

Registration fees are not refundable; however, cancellations submitted in writing prior to conference end receive full account credit. Credits valid for 2 years and applicable to any IAPP product or conference.

iapp.org
2Training cancellation policy
ModelOne time/ perpetual licenseBilling cadencePay-as-you-go
Notes

Full credit toward future IAPP purchases if cancelled two weeks or more prior to training. Must contact customer support if less than two weeks remain.

iapp.org
3Membership tiers
ModelSubscriptionBilling cadenceAnnual
Notes

Individual and organizational membership available. Members receive free access to research library and discounts on training (e.g., 20% off online training with exam bundle).

iapp.org
4Web conferences
ModelFreemiumBilling cadencePay-as-you-go
Notes

Many web conferences are free to IAPP members. Non-members are charged a fee. Co-sponsored web conferences are free to everyone due to sponsor underwriting.

iapp.org
GTM typeB2B and B2C
B2B and B2C
Offering typeServices
Services
Core offering1 text field

IAPP is a not-for-profit professional association that delivers globally recognized privacy and AI governance certifications (CIPP, CIPM, CIPT, AIGP), aligned instructor-led and online training programs, and a portfolio of major industry conferences (Global Summit, Privacy. Security. Risk., AI Governance Global Europe, Europe Congress, Asia Forum, ANZ Summit). The association also provides a member resource library of 845+ items including legislative trackers and research reports, supported by 160+ local KnowledgeNet chapters hosting 700+ meetings per year and multiple specialized peer networks.

Differentiator
Functional benefit
Problem solved
Quantifiable outcome1 of 3 values shown
  • 179 of 240 jurisdictions analyzed have data protection frameworks, covering 80% of world population
+2 more records
Product overview1 text field

IAPP (International Association of Privacy Professionals) is a policy-neutral, not-for-profit professional association founded in 2000 that serves as the global professional home for privacy, AI governance and digital responsibility. IAPP does not offer a single unified software product but rather a comprehensive portfolio of certification credentials, training programs, conferences, newsletters, online resources, tools/trackers, and professional community networks. The core offerings include privacy certifications (CIPP/E, CIPP/US, CIPP/A, CIPP/C, CIPM, CIPT, FIP) and the AIGP AI governance certification, complemented by certification-aligned training programs and exam prep courses. IAPP provides a library of over 845 resources including tools and trackers (US State Privacy Legislation Tracker, Global AI Law and Policy Tracker, Transfer Impact Assessment Templates), research reports, and web conferences. The organization hosts major conferences including Global Summit, Privacy. Security. Risk.+AI Governance Global, AI Governance Global Europe, Navigate, Europe Congress, Asia Forum, and ANZ Summit. Professional community engagement is facilitated through 160+ KnowledgeNet local chapters, IAPP Networks (Diversity Network, Women's Leadership Network, Engineering Network, Privacy Bar Section Network), and newsletters including Daily Dashboard, AI Governance Dashboard, and regional variants. IAPP also offers the IAPP Events App for conference navigation.

Product and service1 record
1Privacy Certifications (CIPP/E, CIPP/US, CIPP/A, CIPP/C, CIPM, CIPT, FIP)
Scale indicator7 records

Each record includes

Type, Value, Description, Source

Partnership4 partners
Strategic tierMinorTypeGTM or Marketing PartnerAnnounced on2026-07-09
Description

Captain Compliance, a Fort Lauderdale-based privacy technology company founded in 2023, became an IAPP Gold Member Sponsor. The company offers a comprehensive platform for consent management, DSARs, cookie scanning, vendor risk management, and continuous monitoring.

Strategic tierCoreTypeTechnology or Integration
Description

Pearson VUE serves as IAPP's exam delivery partner, providing both testing center locations worldwide and OnVUE online proctoring for certification exams.

Strategic tierCoreTypeTechnology or Integration
Description

Cvent provides badge scanning services for IAPP event exhibitors. Exhibitors can scan attendee badges to collect contact information with attendee consent.

Strategic tierCoreTypeStrategic or Co-development Partner
Description

Co-host of the Navigate Digital Policy Leadership Summit, bringing together leaders in digital policy from industry, government, academia, and civil society.

Recent move6 records

Each record includes

Date, Type, Title, Description, Source

Expansion highlight6 records

Each record includes

Type, Description

Market position
Competitive moat5 records

Each record includes

Type, Details

Key risks2 records

Each record includes

Headline, Details, Source

Key highlights7 records

Each record includes

Headline, Details, Source

Customer concentration

Classification, Details

Segment5 records

Each record includes

Title, Type, Primary, Description, Pain point addressed, Use case, Source

Ideal customer profile3 records

Each record includes

Profile, Firmographic size, Sales motion, Sales cycle length, Buying structure, Purchase trigger, Buyer persona, Geography, Industry vertical, Primary use case, Description, Pain points, Evidence proof points, Target buyer

Technology focused
No
API detail
Has APIbool
No

Docs URL, Description

Integration7 records

Each record includes

Title, Type, Description, Source

AI maturity
App detail

Has app

Feature3 records

Each record includes

Title, Differentiator, Description, Source

Core technology
Revenue estimate
Valuation estimate
Number of profiles
No data
No data
Funding overview

Funding stage, Last funding date, Total funding USD

Funding rounds

Each record includes

Round, Amount USD, Date, Pre money valuation, Total investors, Investors, News

Investors

Each record includes

Name, Type, Date of entry, Rounds participated, Website

Funding detail is available on the Subscription and Enterprise plan.Contact sales →

M&A

Each record includes

Name, Acquisition type, Announced date, Completed date, Status, Website, News

Investment

Each record includes

Name, Round, Announced date, Lead investor, Website, News

M&A and investment is available on the Subscription and Enterprise plan.Contact sales →

IAPP

Privacy and AI Governance Professional Certificationiapp.org

IAPP is a policy-neutral, not-for-profit professional association founded in 2000 that serves as the global professional home for 90,000+ privacy, AI governance, and cybersecurity law practitioners across 160+ chapters, offering certifications, training, conferences, and research resources.

What IAPP does

IAPP (International Association of Privacy Professionals) is a policy-neutral, not-for-profit professional association founded in 2000, headquartered in Portsmouth, New Hampshire, with regional offices in Brussels (EMEA) and Sydney (ANZ). The organization serves as the global professional home for privacy, AI governance, and digital responsibility practitioners, with 90,000+ members across 160+ local KnowledgeNet chapters in 167 locations worldwide. Its primary professional domains are privacy, AI governance, and cybersecurity law, and it operates across individuals, organizations (including Fortune 100 enterprises), and government segments.

IAPP's product portfolio is not a single software platform but rather a credentialing-and-content ecosystem. Core offerings include a portfolio of certifications (CIPP/E, CIPP/US, CIPP/A, CIPP/C, CIPM, CIPT, FIP, and the AIGP for AI governance), certification-aligned training programs, and more than 845 resources such as legislative trackers, transfer impact assessment templates, research reports, and on-demand web conferences. Major events include the Global Summit (Washington D.C.), Privacy. Security. Risk.+AI Governance Global, AI Governance Global Europe, Europe Congress, Asia Forum, and ANZ Summit. Distribution channels include direct e-commerce via the IAPP Store, Pearson VUE for global exam delivery, training partners, and corporate/organizational membership programs. Marketing and member engagement are supported through Marketo, Google Analytics, and a multi-channel newsletter system (Daily Dashboard, AI Governance Dashboard, regional digests).

Revenue is generated through multiple recurring and one-time streams: annual individual and organizational membership fees, bundled training and certification exam purchases, conference registration, product sales (books, digital resources, practice exams, merchandise), and research/subscription content. Specific pricing is not publicly disclosed, but IAPP operates a credit-based refund policy rather than cash refunds for canceled events and products. The organization is governed by a board and membership structure, with no venture capital, private equity, or institutional ownership indicated in the source materials.

IAPP firmographics

Firmographics
Name
IAPP
Legal name
The International Association of Privacy Professionals, Inc.
Website
https://iapp.org
Company type
Private
Founded year
2000
Operating status
Operating
Headcount range
51–100 employees
Short description
IAPP is a policy-neutral, not-for-profit professional association founded in 2000 that serves as the global professional home for 90,000+ privacy, AI governance, and cybersecurity law practitioners across 160+ chapters, offering certifications, training, conferences, and research resources.
Ownership category
akta.pro rank

IAPP industry classification

Industry
Product category
Privacy and AI Governance Professional Certification
NAICS
Professional Organizations (81392)
SIC
Services-Membership Organizations (8600)
akta.pro primary industry
AI Governance, Risk & Compliance (GRC) Platforms (HDAAAMAA)
akta.pro secondary industries
Responsible AI, Security & Privacy Platforms (Safety, Guardrails, PII) (HDAEANAG), Regulatory Readiness & Audit Automation (e.g., EU AI Act, NIST AI RMF, ISO/IEC 42001) (HDAAAMAE)

Keywords

  • Privacy certification programs
  • AI governance certification
  • Professional membership services
  • Data protection conferences
  • Privacy professional training

Where IAPP is headquartered

Location

Headquarters

HQ city
Portsmouth
HQ country
United States
HQ region
North America

Offices3 records

Markets served

IAPP business model

Business model
GTM type
B2B and B2C
Offering type
Services
Cost components
Personnel, Operations, Marketing or Sales, Technology or R&D, Infrastructure, Others

Revenue model

  1. Membership Fees: Annual professional membership providing access to resources, research, community, and discounts on training and events. Available for individuals and organizations.
  2. Conference Registration: Fees for attending IAPP conferences including Global Summit, regional congresses, and specialized summits. Registration fees are not refundable but account credits are provided.
  3. Training and Certification: Certification training, exam fees, and online training courses. Includes certification preparation courses and ongoing professional education (CPE credits).
  4. Publications and Research: Access to member-exclusive reports, salary surveys, and research publications. Some resources are free while others require membership.
  5. Product Sales: Sale of print books, digital books, practice exams, and merchandise through the IAPP store. Credits issued for refunds rather than cash refunds.

Pricing tiers

ModelBillingPrice
One time/ perpetual licensePay-as-you-goConference registration with credit policy
One time/ perpetual licensePay-as-you-goTraining cancellation policy
SubscriptionAnnualMembership tiers
FreemiumPay-as-you-goWeb conferences

Go-to-market motion3 records

Distribution channels6 records

Marketing channels11 records

IAPP product offering

Product offering

Core offering

IAPP is a not-for-profit professional association that delivers globally recognized privacy and AI governance certifications (CIPP, CIPM, CIPT, AIGP), aligned instructor-led and online training programs, and a portfolio of major industry conferences (Global Summit, Privacy. Security. Risk., AI Governance Global Europe, Europe Congress, Asia Forum, ANZ Summit). The association also provides a member resource library of 845+ items including legislative trackers and research reports, supported by 160+ local KnowledgeNet chapters hosting 700+ meetings per year and multiple specialized peer networks.

Product overview

IAPP (International Association of Privacy Professionals) is a policy-neutral, not-for-profit professional association founded in 2000 that serves as the global professional home for privacy, AI governance and digital responsibility. IAPP does not offer a single unified software product but rather a comprehensive portfolio of certification credentials, training programs, conferences, newsletters, online resources, tools/trackers, and professional community networks. The core offerings include privacy certifications (CIPP/E, CIPP/US, CIPP/A, CIPP/C, CIPM, CIPT, FIP) and the AIGP AI governance certification, complemented by certification-aligned training programs and exam prep courses. IAPP provides a library of over 845 resources including tools and trackers (US State Privacy Legislation Tracker, Global AI Law and Policy Tracker, Transfer Impact Assessment Templates), research reports, and web conferences. The organization hosts major conferences including Global Summit, Privacy. Security. Risk.+AI Governance Global, AI Governance Global Europe, Navigate, Europe Congress, Asia Forum, and ANZ Summit. Professional community engagement is facilitated through 160+ KnowledgeNet local chapters, IAPP Networks (Diversity Network, Women's Leadership Network, Engineering Network, Privacy Bar Section Network), and newsletters including Daily Dashboard, AI Governance Dashboard, and regional variants. IAPP also offers the IAPP Events App for conference navigation.

Differentiator

Problem solved

Functional benefit

Products and services

  • Privacy Certifications (CIPP/E, CIPP/US, CIPP/A, CIPP/C, CIPM, CIPT, FIP)

Quantifiable outcome

  • 179 of 240 jurisdictions analyzed have data protection frameworks, covering 80% of world population
  • +2 more outcomes

Companies that use IAPP

Customer profile

Segments5 records

Ideal customer profiles3 records

IAPP technology and API

Technology

Technology focussed No

API detail

Has API
No
API docs
API detail

Core technology

AI maturity

App detail

Integration7 records

Feature3 records

IAPP partnerships and signals

Strategic signal

Partnerships

Four partnerships are on record, tiered minor and core.

  • Captain ComplianceminorGTM or Marketing Partner · 9 July 2026Captain Compliance, a Fort Lauderdale-based privacy technology company founded in 2023, became an IAPP Gold Member Sponsor. The company offers a comprehensive platform for consent management, DSARs, cookie scanning, vendor risk management, and continuous monitoring.
  • Pearson VUEcoreTechnology or IntegrationPearson VUE serves as IAPP's exam delivery partner, providing both testing center locations worldwide and OnVUE online proctoring for certification exams.
  • CventcoreTechnology or IntegrationCvent provides badge scanning services for IAPP event exhibitors. Exhibitors can scan attendee badges to collect contact information with attendee consent.
  • Berkman Klein Center for Internet and Society at Harvard UniversitycoreStrategic or Co-development PartnerCo-host of the Navigate Digital Policy Leadership Summit, bringing together leaders in digital policy from industry, government, academia, and civil society.

Scale indicators7 records

Recent moves6 records

Expansion highlights6 records

IAPP competitors and assessment

Company assessment

Market position

Competitive moat5 records

Key risks2 records

Key highlights7 records

Customer concentration

IAPP social profiles

Digital presence

IAPP financial estimates

Financial estimate

Revenue estimate

Valuation estimate

IAPP leadership team

Management profile

Number of profiles

IAPP funding detail

Funding detail

Funding overview

Funding rounds

Investors

Funding detail is available on the Subscription and Enterprise plan.Contact sales →

IAPP M&A and investment

M&A and investment

M&A

Investments

M&A and investment is available on the Subscription and Enterprise plan.Contact sales →

Frequently asked questions about IAPP

What does IAPP do?

IAPP is a not-for-profit professional association that delivers globally recognized privacy and AI governance certifications (CIPP, CIPM, CIPT, AIGP), aligned instructor-led and online training programs, and a portfolio of major industry conferences (Global Summit, Privacy. Security. Risk., AI Governance Global Europe, Europe Congress, Asia Forum, ANZ Summit). The association also provides a member resource library of 845+ items including legislative trackers and research reports, supported by 160+ local KnowledgeNet chapters hosting 700+ meetings per year and multiple specialized peer networks.

Is IAPP a public or private company?

IAPP is a private company. It is classified as nonprofit foundation owned and is currently operating.

When was IAPP founded?

IAPP was founded in 2000. It employs 51 to 100 people.

Where is IAPP based?

IAPP is headquartered in Portsmouth, United States, in the North America region.

How does IAPP make money?

Five revenue lines are on record. Membership Fees are the primary driver. The others are conference Registration, training and Certification, publications and Research and product Sales.

Does IAPP have an API?

No public API is recorded for IAPP.

What industry is IAPP in?

IAPP's product category is Privacy and AI Governance Professional Certification. Its primary akta.pro industry code is HDAAAMAA, AI Governance, Risk & Compliance (GRC) Platforms, with a secondary code of HDAEANAG, Responsible AI, Security & Privacy Platforms (Safety, Guardrails, PII). Its NAICS code is 81392 and its SIC code is 8600.

Unlock the full company data

50 free credits on sign-up, no credit card required.

Contact sales
Live signals
FinancialContent Business PageCaptain Compliance and CalPrivacy Executive Director Tom Kemp Join Forces for Major IAPP Web ConferenceCaptain Compliance and the IAPP will host a free webinar on Nov. 12, 2026, featuring CalPrivacy Executive Director Tom Kemp discussing 2027 privacy expectations. The conversation will cover rules, technical mandates, audits, and enforcement developments, with Alexander Proctor leading. The event aims to help businesses prepare for new California requirements.FinancialContent Business PageCaptain Compliance is now a IAPP Gold Member Sponsor, Solidifying Position as a Leading Privacy Technology ProviderCaptain Compliance, a Fort Lauderdale-based privacy technology company, announced its elevation to Gold Member Sponsor status with the International Association of Privacy Professionals (IAPP). The company offers a comprehensive platform for consent management, DSARs, cookie scanning, vendor risk management, and continuous monitoring. Founded in 2023, Captain Compliance has formed recent partnerships with various compliance ecosystem players including Drata, insurance companies, and law firms.International Association of Privacy ProfessionalsNotes from the AI Governance Center: The key AI governance issues tackled at AIGG Europe 2026The IAPP AI Governance Global Europe 2026 conference held in Dublin, Ireland brought together governance experts, regulators, and policymakers to discuss the practical implementation of the EU AI Act amid evolving regulatory timelines under the AI Act Omnibus. Key themes included Europe's push for AI sovereignty focused on digital infrastructure and values-based development, the challenges of distributed AI innovation creating 'shadow AI' risks in organizations, and the urgent need for harmonized technical standards to enable compliance. The article emphasizes that AI governance practitioners form a critical professional infrastructure as Europe moves from establishing rules to making them operational.EIN PresswireMeridian Intelligence Group to Attend IAPP AI Governance Global Europe 2026Meridian Intelligence Group will make its international debut at the IAPP AI Governance Global Europe 2026 event in Dublin, Ireland. The company, a leader in AI regulatory compliance due diligence, chose the event for its focus on AI regulatory governance. CEO Nathaniel Dorr said the gathering offers professionals a chance to grow ahead of AI development.Kelley Drye & Warren LLPIAPP Global Privacy Summit 2026: State AI…The IAPP held its annual Global Privacy Summit 2026 in Washington, featuring keynotes from Prince Harry and Salman Rushdie, with sessions focused on compliance effectiveness and emerging regulatory priorities. FTC Commissioner Mark Meador signaled a pragmatic enforcement posture emphasizing remedy fit and highlighted the Take It Down Act as a top agency priority, while state-level discussions revealed over 1,000 AI-related bills introduced this year with a trend toward narrower, risk-based obligations. California officials presented updates on the DROP platform, which has processed over 262,000 deletion requests ahead of the August 1, 2026 deadline, alongside warnings about significant penalties for data broker non-compliance and cookie governance failures reaching seven figures.International Association of Privacy ProfessionalsNotes on the updated Global Privacy Law and DPA Directory and major privacy developmentsThe IAPP Research and Insights team has updated its Global Privacy Law and DPA Directory, reporting that 179 of 240 analyzed jurisdictions now have data protection frameworks in place, covering approximately 80% of the world's population. The EU has proposed the Digital Omnibus package to amend its GDPR after nearly a decade, aiming to reduce compliance costs while preserving fundamental rights protection, and India published Digital Personal Data Protection Rules in November 2025 to implement its DPDPA in a phased approach. Other nations including Bangladesh, the Gambia, Paraguay, Brunei, Cambodia and Pakistan have passed or proposed new comprehensive data protection laws, while Ecuador and Indonesia have established or reorganized new data protection authorities.The Manila TimesFurther Team Expands Prestigious AI Governance Certification, Solidifying Leadership in Responsible AIFurther, a data, cloud, and AI company headquartered in Cleveland, Ohio, announced that more than 15 employees have completed the Artificial Intelligence Governance Professional (AIGP) certification training from the International Association of Privacy Professionals (IAPP). With only around 2,000 people worldwide holding this certification, Further's investment establishes one of the strongest internal AI governance capabilities in the industry. The company is developing AI governance solutions to help clients in highly-regulated sectors maintain compliance and trust as AI adoption continues to grow.ForbesAI Governance Lessons Businesses Can't Ignore In 2026A 2025 AI Governance Profession Report by IAPP and Credo AI, surveying over 670 organizations across 45 countries, found 77% of companies are actively working on AI governance, with 98% still needing additional staff and nearly a quarter citing talent acquisition as their biggest obstacle. The article highlights that half of AI governance professionals are spread across multiple teams with fragmented reporting structures, while regulatory frameworks are accelerating—the EU AI Act penalty regime is now in effect and 260 AI-related measures were introduced across 47 U.S. states in 2025. The piece identifies three governance gaps businesses must address: clear ownership accountability, scalable risk review processes, and board oversight structures matched to AI risk profiles.International Association of Privacy ProfessionalsProfessionalizing Organizational AI Governance ReportIAPP published a report on organizational AI governance based on a survey of over 500 respondents from more than 50 countries conducted between May and July 2023, revealing that 74% of organizations are using or plan to use AI within 12 months and 60% have or will establish dedicated AI governance functions. The report found that 56% of respondents believe their organization does not fully understand AI benefits and risks, while 57% face an absence of control over AI deployment, and AI governance has risen from the ninth to the second most important strategic priority for privacy functions. IAPP has established the IAPP AI Governance Center to provide resources, training and certification for professionals tasked with AI governance responsibilities.International Association of Privacy ProfessionalsAI Governance Profession Report 2025The IAPP and Credo AI published the 'AI Governance Profession Report 2025', revealing that 77% of surveyed organizations are currently implementing AI governance programs, with adoption rates nearing 90% for those already using AI. The report highlights a significant talent shortage, noting that only 1.5% of respondents feel they have sufficient staffing, while privacy and legal functions remain the primary drivers for governance structures.