CIPP/US study guide
CIPP/US · Work through your exam, one topic at a time.
The Certified Information Privacy Professional/United States (CIPP/US) is a professional credential, offered by the International Association of Privacy Professionals (IAPP), that demonstrates a working command of U.S. It is aimed at privacy practitioners, compliance and legal staff, security and IT professionals, consultants, and others whose work touches the collection, use, disclosure, or protection of personal information in a U.S. The CIPP/US study guide has 5 sections and about 1,533 words.
01Introduction to the U.S. Privacy Environment
has no single omnibus privacy law. It regulates by sector and by actor: health (HIPAA), financial services (GLBA), education (FERPA), children's data (COPPA), and credit reporting (FCRA).
320 words, about 2 min02Limits on Private-Sector Collection and Use of Data
Section 5 deception requires a material representation or omission likely to mislead a reasonable consumer. Unfairness requires substantial injury that is not reasonably avoidable and is not outweighed by benefits to consumers or competition.
298 words, about 1 min03Government and Court Access to Private-Sector Information
The Fourth Amendment governs government searches and generally requires a warrant supported by probable cause, subject to exceptions such as consent, exigency, and plain view. The third-party doctrine ( Smith , Miller ) permits subpoenas for records voluntarily given to others, but Carpenter requires a warrant for cell-site location information.
320 words, about 2 min04Workplace Privacy
The Fourth Amendment applies to public employers, where courts assess whether an employee had a reasonable expectation of privacy and whether the search was reasonable; City of Ontario v. Quon illustrates this balancing.
284 words, about 1 min05State Privacy Laws
California's CCPA, as amended by the CPRA, applies to for-profit businesses doing business in California that meet a revenue threshold, process data of 100,000 or more consumers or households, or derive 50 percent or more of revenue from selling or sharing personal information. Rights include know, delete, correct, opt out of sale or sharing, limit use of sensitive information, and non-discrimination.
311 words, about 2 min