As AI governance becomes a job rather than a side task, credentials are appearing to prove competence. They are not equivalent, and they signal different things to clients.

IAPP Artificial Intelligence Governance Professional (AIGP)

Launched by the International Association of Privacy Professionals in 2024, it covers the foundations of AI governance, the laws, standards and frameworks that apply, and governing AI development and deployment. The current body of knowledge took effect in February 2026. It is a broad, law-and-governance credential and has become the reference qualification for AI governance roles.

ISO/IEC 42001 lead implementer and lead auditor

Offered by certification and training bodies, these teach how to build or audit an AI management system to the standard. They suit people who will run or assess a certification programme rather than advise on the law.

Audit and privacy credentials

ISACA has added an AI audit credential for existing IT auditors. The IAPP’s privacy certifications for European, UK and US law remain relevant, because so much AI regulation is still data protection law.

AI literacy

Separately, the EU AI Act requires providers and deployers to take measures on AI literacy for staff who deal with AI systems. A credential for one specialist does not meet that duty for everyone else.

A qualification shows someone has studied the map. Clients will still want to know whether they have walked the ground.

What to do

For an AI governance lead, look for the AIGP or equivalent plus practical experience. For a certification project, add someone trained on ISO 42001. For everyone else, run proportionate AI literacy training and keep a record.

This article is general information on the law as at November 2026. It is not legal advice and has not been updated since that date. See the terms of use.