How to Study and Pass the CIPP-US Exam

So you’re considering taking the CIPP-US privacy certification test?

The most common piece of career advice I’ve heard recently is “go get privacy certified.” That applies even if privacy won’t be your main focus. It’s worth it. But how should you study for the CIPP-US test?

TL:DR: There aren’t many great guides on how to study for and take the exam. I talked with half a dozen CIPP-US certified professionals before I studied and passed on the first try. Here’s what they said.

What Does the Exam Look Like?

The IAPP CIPP-US exam is a 90 question, multiple choice, 2.5 hour test. It tests your understanding of the material in the U.S. Private-Sector Privacy textbook.

You don’t need the accompanying California-specific textbook. You don’t need any video courses on top of it. Just the textbook.

Because all questions are multiple choice, you don’t need to worry about memorizing tiny details as much. The questions range from very basic (which branch of government passes laws?) to unreasonably detailed (what did that FTC report from three decades ago recommend as an exception from X rule?).

The takeaway? You’re not shooting for 100%. The goal is knowing enough to have good guesses for the questions you don’t readily know.

The exam also uses case studies (short hypos that are used for several questions. An example might be a California startup (CCPA?!) that offers healthcare related products (HIPAA?!) to minors (COPPA?!), and their CEO asks you, the privacy officer, a few questions.

Oh and timing is not an issue. You’re given 2.5 hours, but most people finish in less than 1.5 hours.

How Should You Study for the CIPP-US Exam?

What Resources Do You Need?

The textbook.

That’s it.

Everything else is inefficient.

There are also a few Quizlets notecard sets for free that people highly recommended. It saves you the time of making cards yourself.

How Should You Use the Textbook?

Read it once to establish your general understanding. Then go back over it and create your own outline of key concepts and rules (20–25 pages, max).

Should You Use an Online Class?

I didn’t. A handful of CIPP-US certified professionals I talked with either didn’t, or said it wasn’t worth it (they start at over $1,000).

Also for context: I (and others I talked to that didn’t use classes) had virtually zero privacy knowledge beforehand.

Focus on the Most Important Areas

Check out the CIPP-US Exam Blueprint that IAPP offers for free.

It outlines the number of questions that are allocated among different privacy areas. Use that to guide how much time you spend on specific parts of the book.

Do a Practice Exam

You should take at least one practice exam so you get used to what the exam psychologically feels like.

How Much Should I Study?

Time estimates range from cumulative 40–50 hours. Less if you’re already well-versed in privacy. Maybe more if you have zero knowledge and find it very difficult.

Good luck studying!