Certified Information Privacy Professional/US

Study plan

IAPP logo

How to Pass the Certified Information Privacy Professional/US Exam

CIPP/US

A study plan for the Certified Information Privacy Professional/US certification exam, built from the official domain weights instead of a generic template. Focus heavily on the distinction between sectoral federal laws and the rising tide of state comprehensive laws. Use case studies to practice applying the 'Fair Information Practice Principles' (FIPPs) to hypothetical data breaches or collection scenarios.

5 domains
90 questions
90 min
75% to pass

Study in weight order, not topic order

The plan below follows the official blueprint weights, so the order of study is the order that returns the most points.

  1. 1

    State Privacy Laws

    25%
    • Comprehensive state laws (CCPA/CPRA, etc.)
    • State Attorney General enforcement
    • Biometric laws
    • Comparison of state frameworks

    22 practice questions tagged to this domain.

  2. 2

    U.S. Privacy Environment

    20%
    • Federal privacy laws
    • Regulatory agencies (FTC, FCC, etc.)
    • Sectoral approach to privacy
    • Constitutional protections

    18 practice questions tagged to this domain.

  3. 3

    Government and Court Access

    20%
    • Surveillance laws
    • Electronic Communications Privacy Act (ECPA)
    • FISA
    • Law enforcement access to data

    18 practice questions tagged to this domain.

  4. 4

    Limits on Private-Sector Collection and Use

    20%
    • Notice and consent
    • Data minimization
    • Consumer rights
    • Fair information practices

    18 practice questions tagged to this domain.

  5. 5

    Workplace Privacy

    15%
    • Employee monitoring
    • HR data management
    • Privacy in the employment lifecycle
    • Labor laws and privacy

    14 practice questions tagged to this domain.

Three phases, in order

Most failures are process failures, not knowledge failures.

Step 1

Phase 1 — Learn the high-weight domains

Start where the points are. The first domains on this plan carry the most weight, so a gap there costs the most. Cover the objectives, then close each topic with practice questions you actually get wrong.

Step 2

Phase 2 — Close the mid-weight domains

The middle of the blueprint is where most candidates plateau. These domains are worth less per topic than the first phase, but they add up fast, and they are the usual difference between a near miss and a clear pass.

Step 3

Phase 3 — Timed full mocks

Stop reading new material at this point. Run full-length exams under the real time limit and the real format, and use the per-domain breakdown to find which domain is still costing you the pass.

Where we put the emphasis

The exam prioritizes the intersection of legal theory and practical compliance, testing whether a candidate can translate complex statutes into actionable corporate privacy policies.

The order matters less than the loop. Every domain you finish should end with questions you got wrong, because the mistake is the only thing you actually needed to study. On the Certified Information Privacy Professional/US that loop is worth 15% of the exam in the first block alone.

More about the Certified Information Privacy Professional/US exam

Explore the rest of this page series: format, cost, difficulty, requirements and how to prepare.

Related certifications

Explore other certifications in the same category and see how they stack up.

Frequently asked questions

Everything you need to know about the Certified Information Privacy Professional/US exam.