IAPP Certified Information Privacy Professional (CIPP/US) Cert Prep
4h 51mIntermediate2025-02-13
Authors

Mike Chapple
Teaching Professor at the University of Notre Dame
Course details
Explore the comprehensive journey to becoming a Certified Information Privacy Professional US (CIPP/US). Instructor Mike Chapple explains the essential U.S. privacy environment, including key privacy laws and the roles of federal and state regulatory authorities. Understand the structure of the CIPP/US exam, including question types, testing environments, and valuable exam tips. Delve into detailed modules covering information management, healthcare privacy law, financial privacy law, and workplace privacy. Discover effective strategies for developing privacy programs, managing data flows, and ensuring compliance with international data transfer requirements. Gain insights into the legal implications of privacy practices, from liabilities to regulatory actions by the FTC and other bodies. This course helps you prepare to take the CIPP/US exam and advance your expertise in information privacy, positioning yourself as a valuable asset in any organization.
Skills covered
Data PrivacyCert PrepData Science
Concepts
Introduction
- Preparing for the CIPP US exam
The CIPP US Program
- Introducing the CIPP US program
- Is the CIPP US right for you
- Study resources
Inside the CIPP US Exam
- The CIPP US exam
- In person CIPP US exam environment
- At-home testing
- CIPP US question types
- Exam tips
After the Exam
- Passing the CIPP US exam
- Continuing education requirements
Domain I - U.S. Privacy Environment
- Overview of the U.S. privacy environment
U.S. Law
- Branches of government
- Sources of law
- Legal definitions
- Analyzing privacy laws
Regulatory Authorities
- Federal regulatory authorities
- State regulatory authorities
- Industry self-regulation
- Cross-border privacy enforcement
- International data transfers
Liability
- Legal liability
- Contract law
- Torts and negligence
- Unfair and deceptive trade practices
Information Management
- Privacy program development
- Data inventory
- Data classification
- Interview key employees
- Follow data flows
- Data sharing and transfers
Data Retention and Disposal
- Eliminate unnecessary business processes
- Clean up digital PII stores
- Destroy paper records
Privacy Practices
- Online privacy
- Privacy education
Computer Security
- Malware
- Ransomware
- What is a privacy incident
- Build an incident response program
- Vendor information management
Domain II - Private Sector Privacy
- Overview of private sector privacy
Federal Trade Commission
- The FTC Act
- FTC privacy enforcement actions
- FTC security enforcement actions
- COPPA
- Future of federal enforcement
Healthcare Privacy Law
- HIPAA
- HITECH
- HIPAA and online tracking
- 21st Century Cures Act
- Substance use disorder records
Financial Privacy Law
- Fair Credit Reporting Act (FCRA)
- Fair and Accurate Credit Transactions Act (FACTA)
- Gramm-Leach-Bliley Act (GLBA)
- Dodd-Frank Act
Education Privacy Law
- Family Educational Rights and Privacy Act
Telecommunications and Marketing Privacy Law
- Telemarketing privacy
- Junk Fax Prevention Act
- CAN-SPAM Act
- Telecommunications Act
- Cable Communications Policy Act
- Video Privacy Protection Act
- Driver's Privacy Protection Act
- Data ethics
- Web scraping
Domain III - Government and Court Access to Information
- Overview of government and court access to information
Law Enforcement and Privacy
- Access to financial information
- Access to communications
- CALEA
National Security and Privacy
- Foreign Intelligence Surveillance Act
- USA PATRIOT Act
- USA FREEDOM Act
- Cybersecurity Information Sharing Act
Civil Litigation and Privacy
- News media privacy
- Electronic discovery
Domain IV - Workplace Privacy
- Overview of workplace privacy
Workplace Privacy
- Workplace privacy concepts
- Regulating workplace privacy
- Antidiscrimination laws
Employee Background Screening
- Background screening and the FCRA
- Background screening techniques
Employee Monitoring
- Employee monitoring
- Employee monitoring regulation
- Unions and employee monitoring
Investigating Misconduct
- Conducting misconduct investigations
- Terminating employees
Domain V - State Privacy Laws
- Overview of state privacy laws
State Privacy Laws
- Federal vs. state authority
- Applicability of state laws
- Common provisions
- Marketing and financial privacy
- Artificial intelligence bias laws
State Law Review
- California data privacy law
- Colorado data privacy law
- Connecticut data privacy law
- Delaware data privacy law
- Florida data privacy law
- Illinois data privacy law
- Montana data privacy law
- Nevada data privacy law
- New Jersey data privacy law
- New York data security regulation
- Oregon data privacy law
- Pennsylvania data privacy law
- Texas data privacy law
- Utah data privacy law
- Virginia data privacy law
- Washington data privacy law
Data Breach Notification Laws
- Data breach notification laws
Conclusion
- Preparing for the exam