IAPP Certified Information Privacy Professional (CIPP/US) Cert Prep

4h 51mIntermediate2025-02-13

Authors

Mike Chapple

Teaching Professor at the University of Notre Dame

Course details

Explore the comprehensive journey to becoming a Certified Information Privacy Professional US (CIPP/US). Instructor Mike Chapple explains the essential U.S. privacy environment, including key privacy laws and the roles of federal and state regulatory authorities. Understand the structure of the CIPP/US exam, including question types, testing environments, and valuable exam tips. Delve into detailed modules covering information management, healthcare privacy law, financial privacy law, and workplace privacy. Discover effective strategies for developing privacy programs, managing data flows, and ensuring compliance with international data transfer requirements. Gain insights into the legal implications of privacy practices, from liabilities to regulatory actions by the FTC and other bodies. This course helps you prepare to take the CIPP/US exam and advance your expertise in information privacy, positioning yourself as a valuable asset in any organization.

Skills covered

Data PrivacyCert PrepData Science

Concepts

0. Introduction

01 - Preparing for the CIPP US exam

1. The CIPP US Program

02 - Introducing the CIPP US program
03 - Is the CIPP US right for you
04 - Study resources

2. Inside the CIPP US Exam

05 - The CIPP US exam
06 - In person CIPP US exam environment
07 - At-home testing
08 - CIPP US question types
09 - Exam tips

3. After the Exam

10 - Passing the CIPP US exam
11 - Continuing education requirements

4. Domain I - U.S. Privacy Environment

12 - Overview of the U.S. privacy environment

5. U.S. Law

13 - Branches of government
14 - Sources of law
15 - Legal definitions
16 - Analyzing privacy laws

6. Regulatory Authorities

17 - Federal regulatory authorities
18 - State regulatory authorities
19 - Industry self-regulation
20 - Cross-border privacy enforcement
21 - International data transfers

7. Liability

22 - Legal liability
23 - Contract law
24 - Torts and negligence
25 - Unfair and deceptive trade practices

8. Information Management

26 - Privacy program development
27 - Data inventory
28 - Data classification
29 - Interview key employees
30 - Follow data flows
31 - Data sharing and transfers

9. Data Retention and Disposal

32 - Eliminate unnecessary business processes
33 - Clean up digital PII stores
34 - Destroy paper records

10. Privacy Practices

35 - Online privacy
36 - Privacy education

11. Computer Security

37 - Malware
38 - Ransomware
39 - What is a privacy incident
40 - Build an incident response program
41 - Vendor information management

12. Domain II - Private Sector Privacy

42 - Overview of private sector privacy

13. Federal Trade Commission

43 - The FTC Act
44 - FTC privacy enforcement actions
45 - FTC security enforcement actions
46 - COPPA
47 - Future of federal enforcement

14. Healthcare Privacy Law

48 - HIPAA
49 - HITECH
50 - HIPAA and online tracking
51 - 21st Century Cures Act
52 - Substance use disorder records

15. Financial Privacy Law

53 - Fair Credit Reporting Act (FCRA)
54 - Fair and Accurate Credit Transactions Act (FACTA)
55 - Gramm-Leach-Bliley Act (GLBA)
56 - Dodd-Frank Act

16. Education Privacy Law

57 - Family Educational Rights and Privacy Act

17. Telecommunications and Marketing Privacy Law

58 - Telemarketing privacy
59 - Junk Fax Prevention Act
60 - CAN-SPAM Act
61 - Telecommunications Act
62 - Cable Communications Policy Act
63 - Video Privacy Protection Act
64 - Driver's Privacy Protection Act
65 - Data ethics
66 - Web scraping

18. Domain III - Government and Court Access to Information

67 - Overview of government and court access to information

19. Law Enforcement and Privacy

68 - Access to financial information
69 - Access to communications
70 - CALEA

20. National Security and Privacy

71 - Foreign Intelligence Surveillance Act
72 - USA PATRIOT Act
73 - USA FREEDOM Act
74 - Cybersecurity Information Sharing Act

21. Civil Litigation and Privacy

75 - News media privacy
76 - Electronic discovery

22. Domain IV - Workplace Privacy

77 - Overview of workplace privacy

23. Workplace Privacy

78 - Workplace privacy concepts
79 - Regulating workplace privacy
80 - Antidiscrimination laws

24. Employee Background Screening

81 - Background screening and the FCRA
82 - Background screening techniques

25. Employee Monitoring

83 - Employee monitoring
84 - Employee monitoring regulation
85 - Unions and employee monitoring

26. Investigating Misconduct

86 - Conducting misconduct investigations
87 - Terminating employees

27. Domain V - State Privacy Laws

88 - Overview of state privacy laws

28. State Privacy Laws

89 - Federal vs. state authority
90 - Applicability of state laws
91 - Common provisions
92 - Marketing and financial privacy
93 - Artificial intelligence bias laws

29. State Law Review

94 - California data privacy law
95 - Colorado data privacy law
96 - Connecticut data privacy law
97 - Delaware data privacy law
98 - Florida data privacy law
99 - Illinois data privacy law
100 - Montana data privacy law
101 - Nevada data privacy law
102 - New Jersey data privacy law
103 - New York data security regulation
104 - Oregon data privacy law
105 - Pennsylvania data privacy law
106 - Texas data privacy law
107 - Utah data privacy law
108 - Virginia data privacy law
109 - Washington data privacy law