Exam format
Certified Information Privacy Professional/US Exam Format
Everything the official exam blueprint specifies: question count, time limit, scoring and the weight each domain carries. The Certified Information Privacy Professional/United States (CIPP/US) is the premier certification for professionals seeking to demonstrate expertise in the legal and regulatory environment of privacy in the United States. Unlike many global certifications that focus on a single unified law like GDPR, the CIPP/US addresses the unique, fragmented, and sectoral nature of U.S. privacy law. Candidates must navigate a complex web of federal oversight, state-specific comprehensive privacy acts, and various industry-specific regulations. The exam evaluates the ability to interpret legal requirements and apply them to organizational practices, ensuring compliance with both sectoral and state-level mandates. It covers everything from constitutional privacy rights and government surveillance to the nuances of consumer rights under emerging state frameworks.
- 90 questions
- 90 min
- 75% to pass
- 5 domains
certilumExam facts at a glance
The published specifications for this certification.
| Specification | Value |
|---|---|
| Questions | 90 |
| Time limit | 90 minutes (60s per question) |
| Passing score | 75% — 300 (on a scale of 100 to 500) |
| Domains | 5 |
| Level | Professional |
| Question bank here | 90 questions |
| Published format | 90 multiple-choice questions, has an allotted time of 2.5 hours with a 15-minute break |
| Source | Official exam specification, published by the vendor |
Official domain weights
The percentage of the exam each domain carries. Weight your revision by these numbers, not by what you find hardest.
| Domain | Weight | Topics | Practice Qs |
|---|---|---|---|
| Workplace Privacy | 15% |
| 14 |
| State Privacy Laws | 25% |
| 22 |
| U.S. Privacy Environment | 20% |
| 18 |
| Government and Court Access | 20% |
| 18 |
| Limits on Private-Sector Collection and Use | 20% |
| 18 |
The heaviest domain is Workplace Privacy at 15%, and that is where lost points cost you the most. Certilum scores you per domain so you can see the difference between a knowledge gap and a formatting problem.
Note from the vendor record: Current Body of Knowledge is Version 2.6.1 (approved 3 March 2025, effective 1 Sept. 2025, supersedes 2.6); the BoK is reviewed annually and changes are communicated to candidates at least 90 days before they appear on the exam. Scoring wording changed: IAPP now converts raw scores to a scale of 100 to 500 with a cut score of 300, so the older '700 or above' figure should not be used. No prerequisites; CIPP/US is ANAB-accredited under ISO 17024:2012. Two-year certification term requiring 20 hours of CPE per certification over the term plus a USD250 Certification Maintenance Fee (or IAPP membership, USD295 annually) — note the policy states 20 CPE per two-year term, not 20 per year. Official exam page
More about the Certified Information Privacy Professional/US exam
Explore the rest of this page series: format, cost, difficulty, requirements and how to prepare.
Related certifications
Explore other certifications in the same category and see how they stack up.
Frequently asked questions
Everything you need to know about the Certified Information Privacy Professional/US exam.