Study guide
1.1 Current Exam Facts
IAPP Certified Information Privacy Professional/United States CIPP/US
Track your progress as you read
Finished sections get a check mark.
1 Introduction & Exam Overview
1.1 Current Exam Facts 1.2 BoK 2.6.1, Scoring, Activation, CPE, and 2026 Updates
2 Domain I: The U.S. Legal Framework
2.1 Branches of Government and Their Privacy Roles 2.2 Sources of U.S. Privacy Law 2.3 Scope, Jurisdiction, Preemption, and Private Rights of Action 2.4 Major Regulatory Authorities
3 Domain I: Self-Regulation, Liability, and Enforcement
3.1 Self-Regulatory Models 3.2 Contract, Tort, Fiduciary Duty, Negligence, and UDAP 3.3 Federal and State Enforcement Authorities 3.4 Cross-Border Enforcement, GPEN, PCI, and Trust Marks
4 Domain I: Information Management Foundations
4.1 Data Inventory, Classification, and Records of Processing 4.2 Data-Flow Mapping, Sharing, and Transfers 4.3 Privacy Program Development and Workforce Training 4.4 Vendors, Cloud, DPAs, and Third-Party Sharing
5 Domain I: Accountability, Notices, and Online Privacy
5.1 Accountability, Incident Response, and Due Diligence 5.2 User Preferences, Retention, Disposal, and Privacy Notices 5.3 Online Tracking, Profiling, and Digital Advertising Basics
6 Domain I: International Transfers and Multinational Compliance
6.1 Schrems Decisions and Transfer Requirements 6.2 SCCs and the EU-U.S. Data Privacy Framework 6.3 GDPR Requirements and Multinational Conflicts 6.4 FADP and Other Non-U.S. Intersections
7 Domain II: FTC Consumer Privacy
7.1 FTC Act and COPPA 7.2 FTC Privacy and Security Enforcement 7.3 Future Enforcement Priorities: Brokers, IoT, AI, Biometrics
8 Domain II: Healthcare and Medical Privacy
8.1 HIPAA Privacy and Security Rules 8.2 HITECH and Breach Notification 8.3 Part 2 and the 21st Century Cures Act
9 Domain II: Financial Sector Privacy
9.1 FCRA and FACTA 9.2 GLBA Privacy Rule, Safeguards Rule, and State Exemptions 9.3 Red Flags Rule, Dodd-Frank, and the CFPB 9.4 Online Banking Privacy and M&A Diligence
10 Domain II: Education, Telecom, and Marketing
10.1 FERPA and Education-Technology Risk 10.2 TCPA, TSR, CAN-SPAM, JFPA, Cable Act, VPPA, DPPA 10.3 Do-Not-Call and the Wireless Domain Registry 10.4 Digital Advertising, Web Scraping, and Data Ethics
11 Domain III: Government and Court Access
11.1 RFPA, BSA, ECPA, and CALEA 11.2 FISA 702, PATRIOT, USA Freedom, and CISA 11.3 Privacy Protection Act and E-Discovery
12 Domain IV: Workplace Privacy Foundations
12.1 Notice, AEP, CRA, ADA, and GINA 12.2 FTC, DOL, EEOC, NLRB, and OSHA 12.3 AEDTs, Background Checks, Testing, and Social Media
13 Domain IV: Monitoring, Investigations, and Post-Employment
13.1 Employee Monitoring and Employer ECPA Duties 13.2 Internal Investigations and Post-Employment Records
14 Domain V: Authority and Common State Framework
14.1 Federal/State Authority, AGs, and the CPPA 14.2 Applicability Thresholds, Exemptions, and Consumer Rights 14.3 State Privacy Notices 14.4 Assessments, Retention, Sale/Sharing, and DPAs
15 Domain V: Sectoral Rules and Enforcement
15.1 Common State Data-Security Requirements 15.2 MHMD, Nevada CHD, GIPA, and Geofencing Bans 15.3 Cure Periods and Penalties 15.4 State Cookie and Online-Tracking Rules
16 Domain V: Biometrics, AI Bias, and California
16.1 Illinois, Washington, Texas, and Facial-Recognition Limits 16.2 NAIC AIS, NYC AEDT, CA/CO ADMT, Colorado Insurance 16.3 CCPA/CPRA, CAADCA, and the Delete Act
17 Domain V: Other State Laws and Breach Notification
17.1 Other Major Comprehensive State Privacy Laws 17.2 Common Breach-Notification Elements 17.3 State Differences, PA SB 696, and Utah S.B. 127
1.1 Current Exam Facts
Key Takeaways Explain This Topic AI
CIPP/US is the IAPP Certified Information Privacy Professional/United States credential and is ANAB-accredited under ISO/IEC 17024:2012
The exam is 90 multiple-choice questions in 2.5 hours, costs $550, and must be used within one year of purchase
A scheduled 15-minute break splits the exam into two submitted halves; you cannot return to the first half after you submit it
The passing score is 300 on a 100–500 scale, and 300 does not mean 60%; some items may be unscored and only scored items count
There is no formal prerequisite; IAPP recommends at least 30 hours of preparation, and Pass/Fail plus the scaled score are immediate
Last updated: August 2026
What CIPP/US Actually Certifies
The Certified Information Privacy Professional/United States (CIPP/US) is the International Association of Privacy Professionals (IAPP) credential that tests whether you can apply U.S. private-sector privacy law. IAPP’s designation page frames it as proof that you understand U.S. privacy laws and regulations, including legal requirements for transferring sensitive personal data to and from the United States, the European Union, and other jurisdictions. It is a law-and-regulation exam, not a project-management exam (that is Certified Information Privacy Manager (CIPM) ) and not a privacy-engineering exam (that is Certified Information Privacy Technologist (CIPT) ).
CIPP/US is a personnel certification, not a course-completion badge. The ANSI National Accreditation Board (ANAB) accredits CIPP/US under International Organization for Standardization (ISO) / International Electrotechnical Commission (IEC) 17024:2012 . That accreditation is why IAPP keeps training and exam development separate, why the public Body of Knowledge (BoK) is the topic list, and why you should refuse unpublished numbers. If a blog recites a 75-scored / 15-unscored split as if it were printed on the live CIPP/US page, treat that as third-party folklore until IAPP publishes it on the designation page.
There is no formal prerequisite . IAPP does not require a law degree, a privacy job title, or a minimum number of years in practice. Anyone who purchases the exam and satisfies Pearson VUE identity rules may sit. The absence of a gate is not a hint that the sitting is easy. IAPP still tells candidates to plan for a minimum of 30 hours of study, and the five-domain blueprint spans constitutional structure, sectoral federal statutes, government-access authorities, workplace privacy, and a fast-moving state landscape.
Format, Fee, and the One-Year Clock
Buy the exam in the IAPP store, then schedule through the MyIAPP portal into Pearson VUE. Member and non-member store price is the same: $550 . That fee buys an exam authorization, not an active credential and not a retake.
- Logistics item Official CIPP/US rule
- Owner / name IAPP Certified Information Privacy Professional/United States
- Accreditation ANAB under ISO/IEC 17024:2012
- Price $550 from the IAPP store
- Questions 90 multiple-choice items
- Item flavors Some scenario-based; some multi-select
- Testing time 2.5 hours
- Scheduled break 15 minutes at the halfway point
- Delivery Pearson VUE test centers or Pearson VUE OnVUE remote proctoring
- Use window Schedule and complete within one year of purchase
- Passing score 300 on a 100–500 scale (300 is not 60%)
- Prerequisite None
- Recommended prep At least 30 hours
- Results Immediate Pass/Fail plus the scaled score
The authorization expires. Handbook and FAQ language is consistent: you must schedule and complete the exam within one year of purchase or the exam is closed and the fee is forfeited. You may reschedule, but the one-year clock does not pause for study delays or last-minute appointment shortages. In-person appointments generally need 48 hours’ notice to change; OnVUE remote appointments are more flexible and can be moved until shortly after the scheduled start. A missed appointment is a no-show . A no-show consumes the attempt; you cannot reopen it as a free reschedule.
Question Types: Scenario Stems and Multi-Select Discipline
Every CIPP/US item is multiple choice. Two flavors change how you spend time.
Scenario-based items attach one or more questions to a fact pattern. The stem is longer than a one-line recall prompt. Before you look at the choices, extract four facts: who the actor is (controller, processor, employer, covered entity, data broker), what data is in play (health, financial, children’s, employee, biometric, geolocation), which jurisdiction is doing the work (federal statute, named state, transfer out of the European Union), and what the legal hook is (notice, consent, exception, preemption, private right of action, government compulsory process). Scenario details are not decoration. A hospital that is also a California “business,” or an employer that is also a Fair Credit Reporting Act (FCRA) user, can flip the correct rule.
Multi-select items are labeled. IAPP’s FAQ example is the language you should expect: “Select 3 of the 5 options below.” You must mark the exact number of correct responses. No partial credit is awarded. Two of three correct answers is still a zero on that item. Selecting a fourth extra choice also fails the item. Single-answer items will not accept more than one selection, so the label is the only warning you get. Treat a multi-select as a set: if you are sure of one answer and guessing among the rest, you still need the full set to score the point.
Inside a half, you can move forward and backward and flag items for review. That review window dies when the half is submitted. It does not survive the break.
The Break Rule That Splits the Exam
You have 2.5 hours of testing time. Halfway through, the delivery system offers a scheduled 15-minute break . That break is not a pause button on a single 90-question booklet.
The IAPP Certification Candidate Handbook (v5.3.2, effective 1 June 2026) is explicit. The break divides the exam into two distinct halves . Each half contains half the questions and half the time. Whether you accept or skip the break, you must finish and submit the first half before the second half opens. After that submission, you cannot return to the first half . Flagged items, unanswered items, and “I will come back later” notes in half one are gone.
Plan as if you are sitting two shorter exams, not one long review cycle. A common fail pattern is spending too long on early Domain I scenarios, intending to finish them after a stretch, and then watching the first-half submit lock those items. Build a mid-half checkpoint: if you are not on pace when half the first-half clock is gone, guess, flag only if you still have first-half time, and keep moving.
Unscheduled breaks do not work the same way. At a test center you may leave the room, but the timer does not stop . On OnVUE, leaving the webcam view except during the scheduled break can revoke the exam. Remote rules also ban extra monitors, talking or whispering to yourself, and other programs running beside the OnVUE software.
Delivery Choices: Test Center Versus OnVUE
IAPP delivers CIPP/US two ways, both through Pearson VUE.
In-person testers pick from more than 6,000 Pearson VUE centers. Arrive about 15 minutes early with two qualifying IDs that match the name in MyIAPP. Late arrival can be treated as a no-show. Centers bar electronics and reading material in the exam room. The proctor may discuss procedures, not content.
Remote testers use Pearson VUE OnVUE . IAPP tells candidates to use a personal computer , not a work-issued device, and not to sit the exam through a virtual private network (VPN) . Check-in includes a face photo, a government-ID photo, and room scans. Pearson uses artificial intelligence (AI) to assist a human proctor; AI does not make the final eligibility decision. During the sitting you must stay in camera, stay silent, keep other people out of the room, and leave the webcam untouched. The proctor can see you, not the item text, and will not interpret a question for you.
Neither channel changes the content, the 90-item count, the 2.5-hour clock, or the two-half submit rule.
Scoring Basics: 300 Is a Cut Score, Not a Percentage
IAPP reports CIPP/US on a scaled score from 100 to 500 . 300 or above passes . The Certification FAQ states, in those words, that 300 does not represent 60% . Do not convert 300/500 into a raw-count target, and do not assume you need 54 of 90.
The cut is set after beta testing, psychometric analysis, and Exam Development Board review. The board decides how many scored items a minimally qualified candidate must answer correctly, then maps that raw cut to 300. A perfect scored performance maps to 500. A 100 is the floor for very low raw scores. Only scored items count toward that conversion.
Some items may be unscored . Unscored items are used in exam development. You will not be told which items they are while you test, so answer every question as if it counts. IAPP’s handbook says the official scored/unscored split is listed on the designation page. The live CIPP/US page does not publish a 75-scored / 15-unscored split. Do not memorize “75 scored” as a CIPP/US fact. The handbook table that maps 50 correct answers to 300 and 75 correct answers to 500 is labeled a fictional scale example . Actual scales vary by form.
You will not receive a raw “X of 90 correct.” After you submit the second half, results are immediate : Pass or Fail plus the scaled score. Test-center sittings can include a printout; every candidate also receives email and can retrieve the report through MyIAPP and Pearson VUE. The report includes domain percentages . Those percentages are diagnostics. They cannot be averaged to reconstruct the overall score, because domains are not equal in size. Failed candidates do not get to review the actual items.
Passing the exam is still not the same as holding an active CIPP/US. Activation requires IAPP membership or a Certification Maintenance Fee. That lifecycle is the next section.
Exam-day traps to lock now
Do not treat the 15-minute break as a chance to reopen half-one items.
On a labeled multi-select, select exactly the number requested; two of three is still wrong.
Do not convert 300 into 60% or into a guaranteed raw number.
Do not invent a published 75/15 scored split for CIPP/US.
Confirm the MyIAPP name matches your ID before you travel or launch OnVUE.
Budget at least the 30 hours IAPP recommends; the sitting has no experience waiver that replaces study.