CIPP/US Practice Exam Overview and Instructions
CIPP/US Practice Exam - correct answer Designed to support preparation for the CIPP/US
certification exam.
IAPP - correct answer International Association of Privacy Professionals, the organization that
provides the CIPP/US certification.
Body of Knowledge - correct answer The set of topics and knowledge areas relevant to the
CIPP/US certification.
Practice Exam Purpose - correct answer Helps identify relative strengths and weaknesses in the
major domains of the CIPP/US body of knowledge.
Certification Exam Simulation - correct answer The practice exam simulates the types and
breadth of questions encountered on the CIPP/US certification exam.
Performance Guarantee - correct answer A strong performance on the practice exam does not
guarantee similar success on the certification exam.
Review for Accuracy - correct answer All items on the practice exam were reviewed for
accuracy at the time of publication.
Independent Development - correct answer The practice exam was developed independently
of the CIPP/US certification exam.
Reproduction Restrictions - correct answer The CIPP/US practice exam and rationales may not
be reproduced in any manner other than for use by the original purchaser.
Answer Sheet Instructions - correct answer Print out the answer sheet to indicate your
selection for each question.
Timer Setting - correct answer Set a timer for 150 minutes (2.5 hours) to simulate the
certification exam.
Answer Key Usage - correct answer Print out the answer key to check your answers against the
exam questions.
Correct Response Marking - correct answer Place a '1' or a checkmark in the corresponding
domain column of the answer key for each correct response.
Domain Scoring - correct answer Total the number of correct answer s under each domain
column.
Score Calculation - correct answer Calculate scores as a percent by dividing correct answer s by
total questions in that domain and multiplying by 100.
,Rationales Consultation - correct answer Consult the rationales for detailed explanations of
each answer.
Exam Format - correct answer All questions are multiple-choice with only one correct response.
Sub-domain Indication - correct answer The letter in the box next to the unshaded box
indicates the sub-domain of the body of knowledge related to the question.
Version - correct answer The practice exam is based on the IAPP's CIPP/US body of knowledge
version 2.6.
Publication Year - correct answer The copyright year for the publication is 2025.
Contact for Questions - correct answer Contact information is provided for questions or
comments.
Registered Trademarks - correct answer AIGP®, CIPP®, CIPP/A®, CIPP/C®, CIPP/E®, CIPP/G®,
CIPP/US®, CIPM®, and CIPT® are registered trademarks of the IAPP.
Fair and Accurate Credit Transactions Act of 2003 (FACTA) - correct answer Strengthens the Fair
Credit Reporting Act (FCRA) by introducing provisions that deal directly with identity theft.
Data flow mapping - correct answer A useful tool for organizations to comply with their
regulatory responsibilities.
Important step in data flow mapping - correct answer Identify custodians who are responsible
for the data.
Medical Quizzes app - correct answer A free app that allows users to take a two-minute quiz to
receive a medical diagnosis.
Health Insurance Portability and Accountability Act (HIPAA) - correct answer Does not protect
the medical information provided to Medical Quizzes because the app is not provided by a
covered entity.
U.S. website collecting IP addresses - correct answer Is collecting personal data under U.S. law
depending on whether the website can link the IP address to other identifying information
about the visitor.
Biometric information - correct answer A more popular and secure form of personal
information to verify and/or authenticate identity.
Illinois Biometric Information Privacy Act (BIPA) - correct answer Imposes a $1,000 penalty for
each negligent violation, or a $5,000 penalty for each willful or reckless violation.
Layered privacy notice - correct answer A short privacy notice with key points at the top.
, U.S. Communications Assistance to Law Enforcement Act of 1994 (CALEA) - correct answer
Telecommunications carriers that are NOT subject include search engine platforms.
Penalties for biometric violations - correct answer $1,000 for negligent violations and $5,000
for willful or reckless violations.
Privacy notice - correct answer A document that informs users about how their personal
information is collected and used.
Consent for IP address collection - correct answer Depends on whether the visitor has provided
explicit consent to allow the collection of their IP address.
Hybrid entity - correct answer An entity that provides both covered and non-covered services
under HIPAA.
Sensitive questions in Medical Quizzes - correct answer Users are asked about their medical
history, health conditions, and current symptoms.
Mobile devices - correct answer Devices such as smartphones or computer tablets that can
download apps like Medical Quizzes.
Telecommunications carriers - correct answer Entities that provide communication services,
such as telephone and broadband internet.
Security purposes for IP address collection - correct answer Monitoring website traffic and
ensuring security.
Full privacy notice - correct answer A comprehensive document that includes all details about
data collection and usage.
Short privacy notice - correct answer A concise version that highlights key points for users.
Privacy notice for mobile devices - correct answer A privacy notice specifically designed for use
on mobile platforms.
Vendor contracts - correct answer Agreements with suppliers that may need to be reviewed for
compliance.
Standard contractual clauses (SCCs) - correct answer Legal terms used in contracts to ensure
compliance with data protection regulations.
Identity theft provisions - correct answer Legal measures introduced by FACTA to protect
consumers from identity theft.
Medical professionals - correct answer Individuals with qualifications to provide medical advice
or services.
CIPP/US Practice Exam - correct answer Designed to support preparation for the CIPP/US
certification exam.
IAPP - correct answer International Association of Privacy Professionals, the organization that
provides the CIPP/US certification.
Body of Knowledge - correct answer The set of topics and knowledge areas relevant to the
CIPP/US certification.
Practice Exam Purpose - correct answer Helps identify relative strengths and weaknesses in the
major domains of the CIPP/US body of knowledge.
Certification Exam Simulation - correct answer The practice exam simulates the types and
breadth of questions encountered on the CIPP/US certification exam.
Performance Guarantee - correct answer A strong performance on the practice exam does not
guarantee similar success on the certification exam.
Review for Accuracy - correct answer All items on the practice exam were reviewed for
accuracy at the time of publication.
Independent Development - correct answer The practice exam was developed independently
of the CIPP/US certification exam.
Reproduction Restrictions - correct answer The CIPP/US practice exam and rationales may not
be reproduced in any manner other than for use by the original purchaser.
Answer Sheet Instructions - correct answer Print out the answer sheet to indicate your
selection for each question.
Timer Setting - correct answer Set a timer for 150 minutes (2.5 hours) to simulate the
certification exam.
Answer Key Usage - correct answer Print out the answer key to check your answers against the
exam questions.
Correct Response Marking - correct answer Place a '1' or a checkmark in the corresponding
domain column of the answer key for each correct response.
Domain Scoring - correct answer Total the number of correct answer s under each domain
column.
Score Calculation - correct answer Calculate scores as a percent by dividing correct answer s by
total questions in that domain and multiplying by 100.
,Rationales Consultation - correct answer Consult the rationales for detailed explanations of
each answer.
Exam Format - correct answer All questions are multiple-choice with only one correct response.
Sub-domain Indication - correct answer The letter in the box next to the unshaded box
indicates the sub-domain of the body of knowledge related to the question.
Version - correct answer The practice exam is based on the IAPP's CIPP/US body of knowledge
version 2.6.
Publication Year - correct answer The copyright year for the publication is 2025.
Contact for Questions - correct answer Contact information is provided for questions or
comments.
Registered Trademarks - correct answer AIGP®, CIPP®, CIPP/A®, CIPP/C®, CIPP/E®, CIPP/G®,
CIPP/US®, CIPM®, and CIPT® are registered trademarks of the IAPP.
Fair and Accurate Credit Transactions Act of 2003 (FACTA) - correct answer Strengthens the Fair
Credit Reporting Act (FCRA) by introducing provisions that deal directly with identity theft.
Data flow mapping - correct answer A useful tool for organizations to comply with their
regulatory responsibilities.
Important step in data flow mapping - correct answer Identify custodians who are responsible
for the data.
Medical Quizzes app - correct answer A free app that allows users to take a two-minute quiz to
receive a medical diagnosis.
Health Insurance Portability and Accountability Act (HIPAA) - correct answer Does not protect
the medical information provided to Medical Quizzes because the app is not provided by a
covered entity.
U.S. website collecting IP addresses - correct answer Is collecting personal data under U.S. law
depending on whether the website can link the IP address to other identifying information
about the visitor.
Biometric information - correct answer A more popular and secure form of personal
information to verify and/or authenticate identity.
Illinois Biometric Information Privacy Act (BIPA) - correct answer Imposes a $1,000 penalty for
each negligent violation, or a $5,000 penalty for each willful or reckless violation.
Layered privacy notice - correct answer A short privacy notice with key points at the top.
, U.S. Communications Assistance to Law Enforcement Act of 1994 (CALEA) - correct answer
Telecommunications carriers that are NOT subject include search engine platforms.
Penalties for biometric violations - correct answer $1,000 for negligent violations and $5,000
for willful or reckless violations.
Privacy notice - correct answer A document that informs users about how their personal
information is collected and used.
Consent for IP address collection - correct answer Depends on whether the visitor has provided
explicit consent to allow the collection of their IP address.
Hybrid entity - correct answer An entity that provides both covered and non-covered services
under HIPAA.
Sensitive questions in Medical Quizzes - correct answer Users are asked about their medical
history, health conditions, and current symptoms.
Mobile devices - correct answer Devices such as smartphones or computer tablets that can
download apps like Medical Quizzes.
Telecommunications carriers - correct answer Entities that provide communication services,
such as telephone and broadband internet.
Security purposes for IP address collection - correct answer Monitoring website traffic and
ensuring security.
Full privacy notice - correct answer A comprehensive document that includes all details about
data collection and usage.
Short privacy notice - correct answer A concise version that highlights key points for users.
Privacy notice for mobile devices - correct answer A privacy notice specifically designed for use
on mobile platforms.
Vendor contracts - correct answer Agreements with suppliers that may need to be reviewed for
compliance.
Standard contractual clauses (SCCs) - correct answer Legal terms used in contracts to ensure
compliance with data protection regulations.
Identity theft provisions - correct answer Legal measures introduced by FACTA to protect
consumers from identity theft.
Medical professionals - correct answer Individuals with qualifications to provide medical advice
or services.
