Certified Information Privacy Professional US Private-Sector (CIPP/US) Prep Course

Course Overview

1. Foundations of Privacy (Intro + Concepts)

• Definition and history of privacy
• Key privacy terminology
• Privacy frameworks and principles (e.g., Fair Information Practice Principles – FIPPs)
• Key players (regulators, organizations, data subjects)
• Distinction between privacy vs. security

---

2. The U.S. Legal System

• Structure of the U.S. government
  • Legislative, Executive, Judicial branches
• Role of federal vs. state law
• Common law vs. statutory law
• Regulatory agencies (FTC, HHS, etc.)
• Enforcement mechanisms and penalties

---

3. U.S. Federal Privacy Laws

This is a large portion of the exam.

A. Sectoral Privacy Laws

• Healthcare
  • HIPAA and HITECH
• Financial
  • GLBA (Gramm-Leach-Bliley Act)
  • FCRA (Fair Credit Reporting Act)
• Education
  • FERPA
• Children
  • COPPA
• Communications
  • ECPA, Stored Communications Act, Wiretap Act
• Government records
  • Privacy Act of 1974
  • FOIA

B. Other Key Federal Laws

• FTC Act (unfair/deceptive practices)
• CAN-SPAM Act
• TCPA (Telephone Consumer Protection Act)

---

4. U.S. State Privacy Laws

• Comprehensive state privacy laws
  • California (CCPA/CPRA)
  • Virginia (VCDPA)
  • Colorado (CPA)
  • Others (Utah, Connecticut, etc.)
• State data breach notification laws
• State-level enforcement trends
• Variations and inconsistencies across states

---

5. Workplace Privacy

• Employee monitoring and surveillance
• Background checks
• Drug testing
• Email, internet, and device usage policies
• Workplace investigations
• State vs. federal considerations

---

6. Private Sector Data Handling Practices

• Data collection, use, and sharing
• Notice and consent
• Data minimization and purpose limitation
• Data retention and disposal
• Vendor management and third-party sharing

---

7. Government and Law Enforcement Access

• Subpoenas and warrants
• Surveillance laws
• National security authorities
• USA PATRIOT Act / FISA

---

8. Litigation and Enforcement

• FTC enforcement actions
• State Attorney General actions
• Civil litigation and class actions
• Remedies and penalties

---

9. Emerging Issues & Trends

(Increasingly important on the exam)

• AI and automated decision-making
• Biometrics and facial recognition
• Adtech and tracking technologies
• Cross-border data transfers (high-level)
• Data ethics

---

10. Review, Practice Questions, and Exam Strategy

• Practice exams
• Question breakdown techniques
• Time management strategies
• Key areas to memorize vs. understand

Prerequisites

No prerequisites, but we recommend all potential test takers to read the IAPP Privacy Certification Handbook 2018 prior to attending.

Course Comments

• Official IAPP Content
• One Year Complimentary IAPP Membership
• Exam Voucher
• Exam Practice Questions