CIPP/US practice questions and practice exam
Try the free ten-question CIPP/US diagnostic first. Then use 604 CIPP/US practice questions and a 90-question timed set with explanations. It does not predict an IAPP score. Use it to find the rule, jurisdiction or enforcement route that you missed, then repair that gap.
IAPP currently lists 90 multiple-choice questions in 2.5 hours. That is about 100 seconds per question. Start untimed if you are learning. Move to timed mixed sets only after you can explain each answer.
Start the independent practice exam
The full practice interface includes 604 exam-style questions with explanations and an answer grid. It is designed for retrieval practice, not as an imitation or disclosure of secure IAPP material.
Open the CIPP/US practice exam Take the free diagnostic first
How to review a CIPP/US practice question
- Name the legal regime. Decide whether the facts point to federal, state, sectoral, workplace or government-access law.
- Test scope. Identify the organisation, record, activity and jurisdiction.
- Name the authority. Separate regulator powers, state attorney-general enforcement and private claims.
- Write the reason. Record why each tempting distractor fails.
- Return after a gap. Use spaced retrieval. A second correct answer after several days is stronger evidence than immediate recognition.
What a good result does and does not show
| It can show | It cannot show |
|---|---|
| Which topics need review | Your IAPP score |
| Whether you pace mixed questions | That a question will appear on the live exam |
| Whether you can distinguish similar laws | That the IAPP endorses this site |
A practical three-pass routine
First, take the free diagnostic to find your weakest areas. Second, study the linked CIPP/US lessons and answer a small untimed set. Third, return to a mixed timed set and review every answer, including correct guesses. Use the CIPP/US study plan to schedule the cycle.
Answer in brief
A CIPP/US practice exam should test whether you can classify the governing U.S. privacy rule from a short fact pattern. Read the IAPP CIPP/US certification page.
Apply this decision
A health app receives identifiable information. First distinguish the entity and record, then test the relevant sectoral rule, state law and enforcement route. Read the source context.
Common mistake
Jumping straight to a familiar law without first identifying the regulated entity, data type and activity.
Related free lessons
Classify the legal problem before choosing an answer
CIPP/US practice is most useful when it makes you identify the regulated entity, data, activity, jurisdiction and enforcement route before choosing a rule.
Practical example
For a health application, separate the service, record, regulator and state-law facts before deciding whether HIPAA, an FTC rule or a state statute matters.
Common mistake
Starting with a familiar statute name instead of testing whether the entity, data and activity are within that statute's scope.
Sources
Related lessons
Continue your CIPP/US preparation
Five-minute timed sample
Start the timer, answer one exam-style question, then compare your reasoning with the explanation.
Correct answer. Warren and Brandeis's 1890 'The Right to Privacy' in the Harvard Law Review
Warren and Brandeis's 1890 Harvard Law Review article 'The Right to Privacy' set out privacy as 'the right to be let alone.' Westin's later work defined privacy in terms of individual choice over exposure, and the HEW report and UDHR came much later.
Primary sources
- IAPP CIPP/US Body of Knowledge and Exam Blueprint page.
- IAPP Certification FAQs on question format and study preparation.
- IAPP CIPP/US exam store page.
This independent resource is not affiliated with IAPP and does not reproduce live exam questions.
Sources and study method
This independent study material uses the current published CIPP/US outline, active recall, spaced retrieval and scenario practice. Read the full method. Current sources. IAPP CIPP/US certification page, IAPP certification FAQs.
Frequently asked questions
How long is the CIPP/US exam?
IAPP lists 90 multiple-choice questions and 2.5 hours for CIPP/US. Its store page also describes a 15-minute break.
Are these IAPP CIPP/US practice questions?
No. The questions on this site are exam-style and based on public sources. They are not IAPP questions and do not reproduce secure exam content.
What should I do after a weak practice result?
Classify missed questions by legal regime and reasoning error, then revisit the matching lesson before trying a fresh mixed set.