CIPP/US Frequently Asked Questions

CIPP/US Course Frequently Asked Questions (FAQ)

by John Bandler

If you are here you are probably thinking about taking my online privacy study course to prepare for the CIPP/US certification, or have another question about CIPP/US study.

Below I have prepared some answers to frequently asked questions (FAQ).

I take some liberties to keep this (somewhat) readable and entertaining. Some are inspired by actual feedback and comments after teaching for students at many levels and places.

Tell me about your CIPP/US courses

I have two CIPP/US courses:

One course is on the Udemy learning platform, originally geared for lawyers and law students but many non-lawyers are taking it also and finding it useful. This is a solid run-through in the given amount of time, it assumes a degree of existing knowledge and study skills. John Bandler’s CIPP US course at Udemy. Check for coupon codes and don’t overpay. Udemy does dynamic pricing.

Look around for coupon codes, starting on my site. Students or former students or within those school communities where I teach can get a free coupon code from me.
I have solid intro to law resources so that non-lawyers can take this course too.
Stand by for updates Fall 2026.

One course is geared for information security professionals, on the Infosec Skills Cengage learning platform. This is a pretty detailed course with a complete Summer 2026 update. If you have a subscription with this platform, you get this included, so check it out. If you don't have a subscription, I can't make representations about their platform, so see their site for details and do your research. The Cengage platform changes occasionally and I don't hear of it (once upon a time, they kept their course authors closely in the loop).

The below pertains mostly to my Udemy CIPP/US course and my online resources.

Tell me about your 2026 website revamp of CIPP/US resources?

I built out a ton of resources to align with my online courses, and this should be helpful for anyone studying CIPP/US. Before 2026, my CIPP/US pages were getting pretty long, so I needed to build more of them. Now here's the layout:

Do you "teach the test" or have magic secrets to help me pass?

Not really. I try teach you so you understand the body of knowledge and so you have some of the foundational basics to become a privacy professional. If you understand, you will be able to put situations and future changes in the proper context. I teach solid concepts and incorporate my other materials on learning and test taking. I emphasize the importance of solid, honest effort.

This means no magic tricks, no secrets, no shortcuts.

I don't have access to test questions and don't pretend to. If I did have access, I would be bound by IAPP rules and ethics not to disclose those questions to anyone.

I suggest that learners follow this route. Through their honest effort and study, they not only build knowledge and skills, but self-confidence too.

Learners who look for magic tricks, short cuts, and improperly obtained exam questions or "exam dumps" end up cheating themselves, never fully developing the knowledge, skills, or confidence they might have achieved. They risk a life spent looking for crutches and cheats, unless or until they decide to change.

What learning resources do you have?

From a decade of teaching I realized students and learners are aided not just to learn the content, but to learn how to learn.

My learning resources which I incorporate into my courses include:

Your online course for CIPP/US will be as fun as watching Netflix/HBO/Max/Hulu, right?

No, you will still need to keep your streaming services for entertainment. Life would be too easy if work and study were as much fun as play and entertainment. I provide information, and am not an entertainer or edutainer.

I will never have a show on Netflix/HBO/etc, I will never be performing in SoFi stadium. (I would if they asked, but they will never ask, I am pretty sure).

Also, I don't use AI tools nor create "dynamic graphics" that some people seem to prefer.

So accept there will be a lack of entertainment value.

The good news is that even the folks who don't enjoy my courses or think they are boring concede that I am knowledgeable.

So I am happy to share some of that knowledge, research, and work with you.

There are even some who actually enjoy the courses and my style.

You put a lot of time and money into the editing, visual effects, and special effects, right?

No, I can barely edit a video, and don't have time to try. I do straight-through recorded lectures, with a PowerPoint slide deck.

For my early videos, you get it warts and all, no editing, no fancy effects.

For later videos, I incorporate some minor editing of my lectures. This allows me to do a retake when I misspeak (which is pretty regularly), and then I can cut out that prior mistake. I can also edit out my longer pauses. I am not a natural orator and don't pretend to be, but I've had a lot of practice and am solid at it.

Any graphics are my own creation or properly sourced and public domain.

I don't use AI tools, I brainstorm in my head as I develop my PowerPoints.

Is this course for everyone?

No, some people are just not going to like it. So read the description, see a sample video, and try before you purchase. After you buy, there is a great refund option through Udemy if you are not satisfied. As indicated, I can barely edit a video, though as of 2026, I generally edit to cut misspeaks and long pauses.

These are straight-through recorded lectures with my PowerPoint slide decks. Some of the videos are longer than some Udemy viewers would prefer. There's no dynamic graphics, no AI tools used. I live in NYC, you might hear a horn, siren, or construction noise.

In the videos, you're just reading some notes, how is that teaching?

Remember that I'm not using just "some notes" because these are the slide decks I created, and the bullet points are the most important points for me to cover and you to see. I often narrate them, so the voice and screen reinforce each other, and so any commuters (who are listening only) get the full benefit of the video.

This is how I prepare my lectures, serves as my notes while I lecture, ensures I do not skip important points, and is there for the viewer.

It also means it is there for me to improve upon in the next revision.

Sometimes I digress from the bullet points, that's a double edged sword though because it adds to the length.

So that's my style and it keeps things efficient for me. I realize it is not going to hold the attention of some students who prefer dynamic graphics and so forth, and that's OK, each to their own.

Is your course all I need to pass the CIPP/US exam?

It’s hard to know what you will need for the test because everyone starts from a different place and with different studying and test-taking skills.

I try not to “teach the test” but provide the broad knowledge the certification is supposed to certify. I provide some exam preparation tips and I emphasize the priority of what to study based on what is tested in each domain, and additional resources on my main landing page, and I have links to the IAPP site. The IAPP is the ultimate authority on their test and certification.

PS: Be wary of test preparation products that promise to provide you with "everything" you need to pass a test. And remember it is not just about passing the test, but learning the broad professional knowledge, and understanding.

The newer CIPP/US Body of Knowledge (BoK) reinforces the need to understand, and I like that new emphasis.

Does your course cover everything I need to know?

See the above question and answer, and also realize the certification is designed to be for professionals with a deep understanding of privacy. As I discuss, if you look at the IAPP reference materials and body of knowledge, they are voluminous, and there is no way that can all be covered in a 7 or even 14 hour course. So I have tried to prioritize with the most important concepts and details, and I discuss how you can prioritize your further studying.

For example, an earlier reference material from IAPP suggests an entire book on California privacy law. That is great to read if you have the time, but should be a lower priority for your studying.

Your course was created X months/years ago, does it incorporate the changes to the Body of Knowledge (BoK)?

Check the revision date on the course handout (updated periodically), on my website landing page, and you can see the revision date for each video in Udemy.

More importantly, check the IAPP BoK and their materials.

Over the last few years, the changes to the BoK have been really minor, and remember that my course does not pretend to cover every single thing that might be on the test, but to give you that solid foundation on the most important aspects.

Then you supplement with additional resources, to provide additional details, including any updates I might not have covered.

See my page about updates as well.

Your course was created X months/years ago, so it is obsolete now, right?

As above, remember that the changes to the BoK are usually relatively minor, and important law and privacy concepts remain steady and important. My course is designed to cover the high priority concepts which are less likely to change. And remember that additional studying and the details are up to you. As above, remember that the course is not intended to be an exhaustive course covering everything and anything that might be on the test.

See my page about updates as well.

I am not a lawyer nor law student, and found your CIPP/US Udemy course hard to understand

Sorry to hear that, but remember that my Udemy CIPP/US course was designed specifically for US law students and lawyers, and assumes some knowledge and good studying skills. That's how I was able to rip through the material so fast. I made that clear in the title and description, but I also realize some non-lawyers will take the course anyway (welcome to all), and it is good to hear how that experience goes.

Many non-lawyers have taken my Udemy CIPP/US course and found it valuable and I offer resources for non-lawyers too. My website has lots of information on introductory law, my YouTube channel as well, and I have a Udemy course on introduction to law.

I love to teach non-lawyers about law, and have lots of materials on that. I think non-lawyers can get up to speed so that my Udemy CIPP/US course works for them.

If you are a non-lawyer taking or considering taking my CIPP/US Udemy course, please see my other resources, and contact me so I can help you get up to speed on basic law.

I am not a lawyer nor law student, and found your CIPP/US Udemy course helpful

Thank you! I realize many non-lawyers are taking this course, and it is working for them. I will consider that for the next update, including pointing to the introductory law resources so they can get up to speed.

I am not from the U.S and am not familiar with US law, and I found your CIPP/US Udemy course hard to understand

As above, the Udemy CIPP/US course was designed for a certain type of student with a familiarity of US law, so see the answer above.

I am working on pointing all learners to the introductory law resources that will help them get up to speed.

It is exciting to see people from all over the world take my courses, and I am happy to share my knowledge with everyone.

I am not from the U.S and am not familiar with US law, and I found your CIPP/US Udemy really helpful

Thank you!

I really enjoyed your course, thank you

It really warms my heart when I get comments like that. Please consider taking the time to leave a five-star review and positive comment.

After I pass the CIPP/US exam, what do I need to do?

Consider providing positive feedback to John to warm his heart and so this course reaches more people.

Remember you will need to obtain and enter your continuing professional education (CPE) credits with the IAPP to maintain the certification. Put it in your calendar every three months so you don't forget and since there are time-limits.

What does CIPP/US stand for?

CIPP/US stands for Certified Information Privacy Professional, United States and focuses on US privacy law and practice. The certification is administered by the IAPP

What does IAPP stand for?

IAPP stands for International Association of Privacy Professionals. A non-profit, the leading privacy organization in the world.

What really is "privacy law"?

What the CIPP/US calls "Privacy Law", includes other types of law relating to data, cybersecurity, data breach reporting, and more. In fact, it also covers broad swathes of traditional law, and into discrimination law and more. See my article and accompanying video on "What is Privacy" and then "What is Data Law".

When I created the course, Udemy did not have categories of "privacy" and "privacy law" and I tried to convince them but to no avail back then. Maybe they have done so in the meantime.

What really is "privacy"?

Privacy is a term that means different things to different people. See my articles (and videos) on Privacy for more, think on it, and decide what it means to you.

Privacy is not an established professional field or category, is it?

Privacy is definitely an established field, growing rapidly, with the IAPP, many existing and new privacy laws, and tens of thousands of gainfully employed privacy professionals, and many individual privacy certifications.

When I created the course, Udemy did not have categories of "privacy" and "privacy law" and I tried to convince them but to no avail then. Some day I'll have to check back to see if they changed their mind.

When should I take the CIPP/US exam?

There is never a perfect time to take any exam. So my advice is just to schedule now, pick a date as best you can, and set your deadline, study, and take the test.

Law students have a lot going on, classes, exams, the bar exams. But maybe you fit it in during a summer, before the bar exam (a warm-up), right after the bar exam.
Lawyers have a lot going on, getting clients, serving clients and managing caseload, etc. But you can fit in in.
Everyone has a lot going on, with school, work, and life. But you can fit in in.

Where can I get the actual exam questions to study from?

I suggest focusing on learning the body of knowledge content as a professional, and being able to apply it all.

Then consider the IAPP rules. People who promise they have exam questions and exam dumps are probably violating IAPP rules and doing something unethical. You don't want to be a part of that and there are rules about what IAPP expects for test preparation and certification.

I discuss this further in my courses.

The course feedback is only X% positive, so it's not a good course, right?

I will leave it to you to decide if this course is right for you. The course is right for some, but certainly not for all. Everyone learns differently.

Once upon a time, I thought my courses would appeal to a vast majority of people, but now I see that is just not realistic. This world is full of a lot of people with a lot of different backgrounds, learning styles, viewpoints, and beliefs. I can't possibly appeal to everyone. And consider these statistics:

10% of the population believes (or is open to the possibility) that the Earth is flat.
Segments of the population fervently believe certain conspiracy theories which are just not true.
In our history, over 50% of people in certain geographical areas voted certain really terrible people into high U.S. offices, including President, Senate, U.S. House of Representatives, and more.
A large minority of people (e.g. 49% to 30%) have voted for really terrible people for office. Fortunately those terrible people lost that particular election, but the fact remains many wanted them to win and actually voted for them.
I won't name names on who I think is terrible because we may disagree on that. But we can agree that people have different opinions on who is great and who is terrible.
That means that opinions differ on important things, and they will differ on less important things as well (such as my course).

I am really gratified to see the largely positive feedback for my courses, including this one. They are not for everyone, but they are for some. Just like that great country song by Brothers Osbourne.

The course feedback is very positive, will it be right for me?

My Udemy CIPP/US course is one of my top ones, highly rated, and lots of engagement.

Udemy calls it "top rated" and a "best seller" and they really boost the price with dynamic pricing, so you would think I priced it high, but that's Udemy's doing so remember to use my coupon code so you don't overpay.

All my Udemy courses employ lots of effort from me and follow my style and abilities, but this one is most successful. I think that's because of the student demographic:

It's aimed at law students and lawyers, who are already generally excellent studiers.
It is a certification related course, so students are highly motivated to learn because they are taking a certification test.
Students pay to access it, meaning they have invested in their decision, and this affects their engagement and opinion.

I will leave it to you to decide if this course is right for you. The course is right for some, but certainly not for all. Everyone learns differently and prefers different styles.

Conclusion and Disclaimer

The CIPP/US is an excellent certification from an excellent organization, and studying for it will give you an excellent foundation in law and privacy (and laws relating to information security).

I prepared the CIPP/US study courses because I like the body of knowledge and certification. They might be right for you.

See the course descriptions and other information on this site and on the learning platforms. Remember this is just a brief summary and that IAPP is the final authority on the certification and body of knowledge that they administer.

Links to John's 7 CIPP/US Parts plus more

Find my Udemy CIPP/US coupon code

Go here on my website to first get a Udemy CIPP/US coupon code
- If the code is expired, ask me to generate another
This is my Udemy CIPP/US landing page, but wait and don't purchase without a coupon code, which allows you to significantly reduce your cost
- Realize that Udemy does dynamic pricing (fluctuates the price)

Page posted 10/19/2023. Updated 08/13/2026.