Start CIPP/US preparation with the body of knowledge linked from IAPP’s certification page, then match your study materials to its five domains. This guide explains the exam format, the blueprint ranges, and how to turn each objective into a study task. It also explains how to check whether older materials still cover your exam.
Which body of knowledge should you use?
The IAPP CIPP/US page linked to body of knowledge version 2.6.1, effective September 1, 2025, when checked on September 13, 2026. Check that link again before your exam.
The body of knowledge (BoK) defines the assessed knowledge and skills. IAPP reviews it annually and updates it when necessary; a new calendar year alone does not establish a new syllabus.
Compare your existing textbook or notes with the currently linked document. Mark each objective as covered, needing an update, or missing. Keep the material that still matches, and investigate the gaps before buying replacements. This is a suggested study method.
Official sources: IAPP current CIPP/US body of knowledge and blueprint — passages p1-p20; IAPP current certification candidate handbook — passages p1-p34; CIPP/US: Certified Information Privacy Professional/United States | IAPP — passages p1-p2
Exam logistics: format, scoring, and cost
The exam has 90 multiple-choice questions and a 2.5-hour exam duration with a 15-minute break. The listed exam price is USD 550.
Questions are multiple-choice; some are scenario-based. Multi-select questions, where you must select a specific number of correct responses, are clearly labeled, and no partial credit is awarded. The exam is divided into two halves by a 15-minute break at the halfway point; you cannot return to the first half after you submit it.
Scores range from 100 to 500. The passing score is 300, determined by psychometric analysis and reviewed by the exam development board. The passing score does not represent 60 percent.
You can take the exam at a Pearson VUE testing center or remotely through the OnVUE platform. You must schedule the exam at least 24 hours in advance. Upon passing, you must purchase a Certification Maintenance Fee or an IAPP membership to activate the credential.
Official sources: IAPP current certification candidate handbook — passages p1-p34; CIPP/US Exam - IAPP Store — passages p1-p2; Certification FAQs | IAPP — passages p1-p21
The five domains and how the exam weights them
The body of knowledge divides content into five domains, each with a minimum and maximum number of questions on the exam blueprint.
Use the blueprint ranges to allocate study time while checking your own weak areas. The ranges describe domain coverage; they are not a fixed question count you should assign to every practice test.
| Domain | Blueprint range | Focus |
|---|---|---|
| I. The U.S. Privacy Environment | 27-33 | Legal framework, regulatory authorities, information management, transfers |
| II. Federal Privacy Laws | 15-19 | FTC authority and sectoral statutes (health, finance, telecom, education) |
| III. Government and Court Access to Private-sector Information | 3-5 | Law enforcement, national security, civil litigation |
| IV. Workplace Privacy | 4-6 | Pre-employment, monitoring, post-employment |
| V. State Privacy Laws | 17-21 | Comprehensive state acts, breach notification, specific state rules |
Official sources: IAPP current CIPP/US body of knowledge and blueprint — passages p1-p20; IAPP current certification candidate handbook — passages p1-p34
Turn the objectives into a study tracker
Give each objective a place in your notes and a way to check your understanding.
For each objective, record the relevant textbook section or official resource, then add one question you should be able to answer. After practice, record why an answer was wrong and what you need to review.
When studying a law, useful note headings include scope, covered actors, obligations, exceptions, and enforcement. Fill these from the relevant materials. A statute’s name in the syllabus does not itself explain its rules.
Worked exercise
Your notes contain a list of regulator names, but you have no explanation of their roles. The BoK asks you to know their roles and functions. Mark this objective as covered, needing further work, or irrelevant, and choose a next study action.
Show answer
It needs further work. Add an explanation of the relevant roles and functions using the materials for that objective, then check whether you can distinguish them in practice questions.
Recognizing names does not demonstrate the understanding requested by the objective. This original study-planning example shows how to identify a gap without assuming that every page of your existing notes needs replacing.
- Read the objective and notice whether it asks you to identify, explain, apply, or evaluate.
- Find the supporting material and write a short answer in your own words.
- Check that answer against the material, including exceptions and limits.
- Revisit missed questions after reviewing the underlying objective.
Official sources: IAPP current CIPP/US body of knowledge and blueprint — passages p1-p20
Choose resources and plan your next steps
Begin with the free BoK and candidate handbook. Add training or practice materials where they address a specific gap.
IAPP recommends at least 30 hours of study, but that is preparation guidance rather than a guarantee of readiness. Use your prior knowledge and practice results to decide where additional work is needed.
The official digital practice exam provides questions and answer explanations. Review the explanations for both correct and incorrect answers, and connect missed topics back to your study tracker.
- Confirm the BoK version and effective date for your planned exam.
- Read the handbook’s booking, identification, break, and rescheduling policies.
- Compare current prices and contents before purchasing optional materials.
- Plan for continuing privacy education and credential maintenance after passing.
Official sources: IAPP current certification candidate handbook — passages p1-p34; CIPP/US Exam - IAPP Store — passages p1-p2; Certification FAQs | IAPP — passages p1-p21; CIPP/US Practice Exam Digital - IAPP Store — passage p1; U.S. Private-Sector Privacy (CIPP/US) Online Training - IAPP Store — passages p1-p3
Official sources
Exam facts verified:
- IAPP current CIPP/US body of knowledge and blueprint
- IAPP current certification candidate handbook
- CIPP/US: Certified Information Privacy Professional/United States | IAPP
- CIPP/US Exam - IAPP Store
- Certification FAQs | IAPP
- CIPP/US Practice Exam Digital - IAPP Store
- U.S. Private-Sector Privacy (CIPP/US) Online Training - IAPP Store