About the CIPP/US Certification, How to Study for It, and Reference List by John Bandler
This article briefly summarizes the CIPP/US certification, how to study for it, and provides some important resources. CIPP/US stands for Certified Information Privacy Professional, United States and focuses on US privacy law and practice. The certification is administered by the International Association of Privacy Professionals (IAPP).
If you have decided to study for and take the CIPP/US certification, then I suggest that your goal should be:
- Learn the material well enough to pass the test easily and remember it long after you passed the test
- Earn the certification by passing the test
- After you have earned the certification, use your learning to continually demonstrate to yourself and others that this learning and certification has improved you professionally.
If you have decided to learn more about privacy in the United States without pursuing the CIPP/US certification, these materials are a helpful guide for that. Take a look at the substantive information and references below relating to privacy and the CIPP/US body of knowledge.
Privacy has growing importance in all of our professional and personal lives, and is the subject of increasing law and regulation. Privacy is not an isolated field, but overlaps with many others (including cybersecurity, compliance, information governance, organization management) and is a pressing societal issue.
About the IAPP
The IAPP is a non-profit organization based in New Hampshire and with global reach. According to their website, they are the largest and most comprehensive global information privacy community and resource. In addition to their CIPP/US certification, they offer CIPP certifications for other regions and more specific privacy certifications including Certified Information Privacy Manager (CIPM) and Certified Information Privacy Technologist (CIPT). Their website is https://iapp.org/.
You can join the IAPP and maintain your membership for an annual fee of $275. I recommend this if you are pursuing one of their certifications or if you are interested in a career path involving privacy. I find their materials to be well done and exceptionally well organized, and they seem to be a leader in privacy.
About the CIPP/US certification
The CIPP/US certification is well suited for anyone desiring to learn and demonstrate their knowledge regarding US privacy law and practice. To earn the certification, one needs to study the materials, take and pass the test (which costs money), and also pay a certification maintenance fee. That is the basics and you should also read and follow their other rules and guidance as laid out in the Candidate Handbook and elsewhere. As IAPP points out, their certification is accredited and designed to “assess professional competence and experience”.
The exam topics are laid out in IAPP documents including their “Body of Knowledge”, “Exam Blueprint”, and their list of references. Essentially, the main topics tested are:
- Introduction to the U.S. Privacy Environment
- Limits on Private-sector Collection and Use of Data
- Government and Court Access to Private-sector Information
- Workplace Privacy
- State Privacy Laws
The exam costs $550 (last I checked) and is taken at a Pearson VUE testing center or remotely in the comfort of your home or office (Pearson OnVUE).
The CIPP/US materials from IAPP are exceptionally well organized, and are listed and linked to below. Given my background in law I found the certfication exam to be relatively straightforward. For many non lawyers and those not familiar with law it will be more of a challenge.
Often, there is never a perfect time in life to take a certification test. So if you have decided to pursue this certification, you might as well get the test scheduled and give yourself a deadline and start studying.
The test is 90 multiple choice questions, each with four possible answers, and you have 2.5 hours to complete the test. Only 75 questions are scored, meaning that 15 of the questions are not scored – perhaps there only to gain insights for quality control for this and future tests. Each question you answer correctly is worth one point and there are no penalties for wrong answers. The Exam Blueprint lays out approximately how many questions you will see on the various topics.
My other articles have tips on how to study and learn, and how to take an exam. In sum, put in honest continual effort long in advance, learn the materials well, relax, and pass the test (the first time). Then you will retain the knowledge to help you in your career.
Once you have earned your IAPP certification, you need to pay to maintain it. You can do this by being a member of IAPP for $275 annually, which will include the certification maintenance fee and provide many other benefits. If you are not an IAPP member, you will need to pay a certification maintenance fee of $250 for 2 years. As indicated above, I recommend joining and maintaining your membership with IAPP.
After earning your CIPP/US certification, you will also have to earn continuing professional education (CPE) credits and then remember to enter them into the IAPP portal regularly. I think all CPEs need to be entered within three months, after which you cannot get credit for them. So stay on top of this.
Conclusion and Disclaimer
The CIPP/US is an excellent certification from an excellent organization, and studying for it will give you an excellent foundation in law and privacy.
I have simplified things greatly and left out many details, and the IAPP is the main and final authority on their certification. Be sure to read the IAPP materials listed and linked to below, and remember also that my list not be complete or may become out of date. So check the IAPP website and read their materials. This article is a work-in progress, so please let me know of any feedback or suggestions.
I have contracted to prepare a CIPP/US study course, hosted by a respected educational provider. I am excited for the learning opportunity this presents for me and those who will view the course. Of course I will be paid for this, and I believe this has no influence upon my positive view of the CIPP/US certification, but rather is a reflection of it.
Reference List: Sources and Additional Reading
John Bandler’s Articles & Work
- John Bandler, About the CIPP/US Certification, How to Study for It, and References, https://johnbandler.com/cipp-us-certification/ (This Article)
- John Bandler, How to Learn and Study, https://johnbandler.com/how-to-learn-and-study/
- John Bandler, How to Take an Exam, https://johnbandler.com/how-to-take-an-exam
- John Bandler, Certifications and Improving Your Knowledge and Credentials Relating to Technology, Cybersecurity, and More, https://johnbandler.com/certifications-improve-knowledge-credentials-technology-cybersecurity-more/
- John Bandler, Introduction to Law (an outline) https://johnbandler.com/introduction-to-law-outline/
- John Bandler, Cybersecurity Laws and Regulations Part 1, (general legal overview), https://johnbandler.com/cybersecurity-laws-and-regulations-1/
- John Bandler, Cybersecurity Laws and Regulations Part 2, (listing and brief summary of some laws and regulations), https://johnbandler.com/cybersecurity-laws-and-regulations-2/
- John Bandler, Privacy, You, Your Organization, and the New NIST Privacy Framework, https://johnbandler.com/privacy-and-the-new-nist-privacy-framework/
- John Bandler, Cybersecurity, Privacy, You, and Your Organization, https://johnbandler.com/cybersecurity-privacy-you-and-your-organization/
- John Bandler, Policies, Procedures, and Governance of an Organization, https://johnbandler.com/policies-procedures-and-governance-of-an-organization/
- John Bandler's CIPP/US certification preparation course -- in progress with a respected provider of educational content, details to come shortly.
IAPP articles and references (Check all IAPP resources for the most up to date versions)
- IAPP Certification Process, https://iapp.org/certify/certification-process/
- IAPP How to Prepare, https://iapp.org/certify/prepare/
- IAPP Certification, CIPP/US (include link to purchase exam and free resources, which are also listed and linked below), https://iapp.org/certify/get-certified/cippus/
- IAPP CIPP/US Body of Knowledge, U.S. Private-sector Privacy Certification Outline of the Body of Knowledge for the Certified Information Privacy Professional/United States (CIPP/US™), v 2.3. Effective Date: 9/1/2021, https://iapp.org/media/pdf/certification/CIPP_US_BoK_2.3.pdf
- IAPP, CIPP/US Exam Blueprint, U.S. Private-sector Privacy Certification Examination Blueprint for the Certified Information Privacy Professional/United States (CIPP/US™), v 2.4, Effective 9/1/2021, https://iapp.org/media/pdf/certification/CIPP_US_EBP_2.4.pdf
- IAPP Glossary of Privacy Terms for CIPP/US https://iapp.org/resources/glossary/group/cippus/ (also see terms from main glossary page, and then you can later use the filter for CIPP/US, https://iapp.org/resources/glossary/ )
- IAPP, CIPP/US Resources list, U.S. Private Sector Privacy Certification Authoritative Resources List, v. 3.2.2 Updated: 10/28/2020, https://iapp.org/media/pdf/certification/CIPP_US_Authoritative_Resource_3.2.2.pdf
- IAPP Privacy Certification Candidate Handbook 2021, Version 3.6.0, Effective Date: February 1, 2021, https://iapp.org/media/pdf/certification/IAPP%20Privacy%20Certification%20Candidate%20Handbook%203.6.0.pdf
- IAPP CIPP/US Exam Updates effective 9/1/2021, https://iapp.org/media/pdf/certification/IAPP_CERTIFICATION_ExamUpdate_052521_003.pdf
- IAPP CIPP/US free study guide (this is not super helpful, as it is dated 2019, includes the older body of knowledge and older exam blueprint, and has just three sample questions), https://pages.iapp.org/Free-Study-Guides_CIPPUS-FSG-PPC.html
- (Book) Peter Swire and DeBrae Kennedy-Mayo, U.S. Private-Sector Privacy, Third Edition, IAPP, 2020. Available through the IAPP website and store, see, https://iapp.org/store/books/a191P000003oyb7QAA/ and, https://iapp.org/resources/article/u-s-private-sector-privacy-third-edition/ (IAPP indicates this is “the principal text" for the CIPP/US credential. It is written well and clearly and I recommend it).
- IAPP Daily Dashboard, https://iapp.org/news/daily-dashboard/
- IAPP Resources, https://iapp.org/resources/
- Daniel Solove, Privacy & Security, https://teachprivacy.com/
- IAPP Certification (input CPEs), https://iapp.org/certify/cpe/ (After you earn your certification, do not forget to input your CPE regularly!)
- (Book) Daniel J. Solove and Paul M. Schwartz. Privacy Law Fundamentals – New 2019 Edition. Portsmouth: IAPP Publications, 2019, https://iapp.org/store/books/a191P0000035CivQAE/
- Learning How to Learn with Barbara Oakley, https://www.coursera.org/learn/learning-how-to-learn. See also https://barbaraoakley.com/
This page is hosted at https://johnbandler.com/cipp-us-certification/. Copyright John Bandler, all rights reserved. No claim to IAPP materials.
A copy of this article is also available on Medium at https://johnbandler.medium.com/about-the-cipp-us-certification-and-how-to-study-for-it-9a64de08baa0 (though perhaps not kept as current).
Page posted 7/30/2021. Updated 8/23/2021.