I don't have any IAPP certs, fwiw. I know people who do who I wouldn't trust to give data protection advice. I know many people who don't who I would readily trust, and to whom I happily refer work. It is a shame that, for some privacy roles, the gating criteria includes an IAPP cert, but I guess it is seen as an easy, if ineffective, filter.