IAPP Certified Information Privacy Professional (CIPP/US) Cert Prep

IAPP Certified Information Privacy Professional (CIPP/US) Cert Prep

4h 51mIntermediate2025-02-13

Authors

Mike Chapple

Mike Chapple

Teaching Professor at the University of Notre Dame

Course details

Explore the comprehensive journey to becoming a Certified Information Privacy Professional US (CIPP/US). Instructor Mike Chapple explains the essential U.S. privacy environment, including key privacy laws and the roles of federal and state regulatory authorities. Understand the structure of the CIPP/US exam, including question types, testing environments, and valuable exam tips. Delve into detailed modules covering information management, healthcare privacy law, financial privacy law, and workplace privacy. Discover effective strategies for developing privacy programs, managing data flows, and ensuring compliance with international data transfer requirements. Gain insights into the legal implications of privacy practices, from liabilities to regulatory actions by the FTC and other bodies. This course helps you prepare to take the CIPP/US exam and advance your expertise in information privacy, positioning yourself as a valuable asset in any organization.

Skills covered

Data PrivacyCert PrepData Science

Concepts

Introduction

  • Preparing for the CIPP US exam

The CIPP US Program

  • Introducing the CIPP US program
  • Is the CIPP US right for you
  • Study resources

Inside the CIPP US Exam

  • The CIPP US exam
  • In person CIPP US exam environment
  • At-home testing
  • CIPP US question types
  • Exam tips

After the Exam

  • Passing the CIPP US exam
  • Continuing education requirements

Domain I - U.S. Privacy Environment

  • Overview of the U.S. privacy environment

U.S. Law

  • Branches of government
  • Sources of law
  • Legal definitions
  • Analyzing privacy laws

Regulatory Authorities

  • Federal regulatory authorities
  • State regulatory authorities
  • Industry self-regulation
  • Cross-border privacy enforcement
  • International data transfers

Liability

  • Legal liability
  • Contract law
  • Torts and negligence
  • Unfair and deceptive trade practices

Information Management

  • Privacy program development
  • Data inventory
  • Data classification
  • Interview key employees
  • Follow data flows
  • Data sharing and transfers

Data Retention and Disposal

  • Eliminate unnecessary business processes
  • Clean up digital PII stores
  • Destroy paper records

Privacy Practices

  • Online privacy
  • Privacy education

Computer Security

  • Malware
  • Ransomware
  • What is a privacy incident
  • Build an incident response program
  • Vendor information management

Domain II - Private Sector Privacy

  • Overview of private sector privacy

Federal Trade Commission

  • The FTC Act
  • FTC privacy enforcement actions
  • FTC security enforcement actions
  • COPPA
  • Future of federal enforcement

Healthcare Privacy Law

  • HIPAA
  • HITECH
  • HIPAA and online tracking
  • 21st Century Cures Act
  • Substance use disorder records

Financial Privacy Law

  • Fair Credit Reporting Act (FCRA)
  • Fair and Accurate Credit Transactions Act (FACTA)
  • Gramm-Leach-Bliley Act (GLBA)
  • Dodd-Frank Act

Education Privacy Law

  • Family Educational Rights and Privacy Act

Telecommunications and Marketing Privacy Law

  • Telemarketing privacy
  • Junk Fax Prevention Act
  • CAN-SPAM Act
  • Telecommunications Act
  • Cable Communications Policy Act
  • Video Privacy Protection Act
  • Driver's Privacy Protection Act
  • Data ethics
  • Web scraping

Domain III - Government and Court Access to Information

  • Overview of government and court access to information

Law Enforcement and Privacy

  • Access to financial information
  • Access to communications
  • CALEA

National Security and Privacy

  • Foreign Intelligence Surveillance Act
  • USA PATRIOT Act
  • USA FREEDOM Act
  • Cybersecurity Information Sharing Act

Civil Litigation and Privacy

  • News media privacy
  • Electronic discovery

Domain IV - Workplace Privacy

  • Overview of workplace privacy

Workplace Privacy

  • Workplace privacy concepts
  • Regulating workplace privacy
  • Antidiscrimination laws

Employee Background Screening

  • Background screening and the FCRA
  • Background screening techniques

Employee Monitoring

  • Employee monitoring
  • Employee monitoring regulation
  • Unions and employee monitoring

Investigating Misconduct

  • Conducting misconduct investigations
  • Terminating employees

Domain V - State Privacy Laws

  • Overview of state privacy laws

State Privacy Laws

  • Federal vs. state authority
  • Applicability of state laws
  • Common provisions
  • Marketing and financial privacy
  • Artificial intelligence bias laws

State Law Review

  • California data privacy law
  • Colorado data privacy law
  • Connecticut data privacy law
  • Delaware data privacy law
  • Florida data privacy law
  • Illinois data privacy law
  • Montana data privacy law
  • Nevada data privacy law
  • New Jersey data privacy law
  • New York data security regulation
  • Oregon data privacy law
  • Pennsylvania data privacy law
  • Texas data privacy law
  • Utah data privacy law
  • Virginia data privacy law
  • Washington data privacy law

Data Breach Notification Laws

  • Data breach notification laws

Conclusion

  • Preparing for the exam
100,000 Toman