Body of Knowledge and Exam Blueprint v2.6.1
IAPP CIPP/US Study Plan for Nine Sessions
Use this IAPP CIPP/US schedule to review U.S. privacy law, sector rules, and federal and state sources. Start by marking unfamiliar tasks on the official outline, then use the sessions below to practise and revisit errors before your appointment.
Last reviewed:
TestCertify questions are original study items, not official exam questions. Read our practice questions policy.
Adjust the schedule to the time you have
If your calendar is tight, combine related content sessions and keep one timed rehearsal and a separate error review. If you have more time, repeat weak tasks on a different day with different official examples or authorised practice.
Keep a short record of the objective, the reason you missed it, and what you will do differently. Use the outline to check coverage. Use the exam body’s appointment instructions for timing and delivery.
What should you do in each of the nine sessions?
This is a TestCertify study plan. A session can span more than one sitting, especially the rehearsals and their review. Start with IAPP’s sample questions and use a mix of closed-book recall prompts and cases you write from the blueprint if you do not have a full practice exam. Mark that exercise as timing practice. Use a fresh set for the second rehearsal so a better result reflects more than familiarity with the questions.
| Session | Focus | What to produce |
|---|---|---|
| 1 | Baseline and legal sources | Try the issuer samples and tag gaps by domain. Read the legal structure objectives. |
| 2 | Enforcement and information management | Draw a vendor data flow and identify which authority you would consult for each actor. |
| 3 | Consumer protection and health | Compare covered actors, records and activities in two sector examples. |
| 4 | Financial, education and communications privacy | Add these sectors to the worksheet and mark cases that need more facts. |
| 5 | Records requests and workplace privacy | Separate civil discovery and government access. Sketch an employment lifecycle. |
| 6 | State laws and rights | Compare scope and rights in two examples from the current blueprint. |
| 7 | Breach notification and cross-domain review | Identify the facts you would collect before reaching a notification decision. |
| 8 | First timed rehearsal | Complete two closed sections and log errors by objective, reason and pace. |
| 9 | Second timed rehearsal and final review | Use fresh prompts, then retest the issues from the first rehearsal without notes. |
Study resources for this exam
Use the issuer’s current candidate materials for the exam rules. TestCertify provides free guides and a sample ZIP, plus an optional independent prep kit.
Frequently asked questions
What should I study first for IAPP CIPP/US?
Start with the official outline and a short baseline. Mark where you need the most work on U.S. privacy law, sector rules, and federal and state sources before assigning sessions.
How should I shorten the schedule?
Combine related sessions. Keep the baseline, a timed rehearsal, and time to review why you missed items.
Does completing the schedule guarantee readiness?
Use the checklist and your error patterns to decide what to review. No study schedule guarantees an exam result.