IAPP
Certified Information Privacy Professional/United States
CIPP/US · active
Catalog review: 2026-10-29. Only cited fields were reviewed; other values are historical planning data. Salary premiums are estimates, not a promise of a raise.
- Exam cost
- Not verified
- Questions · time · passing score
- 90 questions · 150 minutes · Pass: 300 (100–500 scale)
- Prerequisites
- Not verified — check issuer eligibility
- Estimated salary premium
- Not established by comparable evidence
- Renewal requirements
- 20 CPE per certification over 2 years; maintenance fee or current membership.
- Difficulty
- Not rated
Domains covered
- US privacy laws
- Regulatory compliance
- Sector-specific privacy
Where this credential fits
MyCyberPath career mappings are planning guidance, not universal employer requirements.
Compare this certificationRecent catalog changes
- IAPPexam update
Certified Information Privacy Professional/United States
Certified Information Privacy Professional/United States: exam delivery. Recorded by the October catalog audit; review date, not necessarily the issuer effective date.
What changed
- Before
- Online proctored via Pearson VUE’s OnVue program, or in-person at one of over 6,000 Pearson VUE test centers globally.
- After
- Not verified
- IAPPdomain change
Certified Information Privacy Professional/United States
Certified Information Privacy Professional/United States: skills gained. Recorded by the October catalog audit; review date, not necessarily the issuer effective date.
What changed
- Before
- ** Understanding of the U.S. legal framework for privacy · including branches of government · sources of law · and key legal · concepts. · Knowledge of the enforcement framework for U.S. privacy and security laws · including regulatory authorities like the Federal · Trade Commission (FTC) · Federal Communications Commission (FCC) · Department of Commerce (DoC) · Department of · Health and Human Services (HHS) · banking regulators · state attorneys general · and the California Privacy Protection Agency · (CPPA). · Understanding of information management principles from a U.S. perspective · encompassing data inventory · classification · flow mapping · sharing · transfers · privacy program development · vendor risk management · data processing agreements · cloud computing · third-party data sharing · incident response · accountability · user preferences · data retention · privacy · notices · and international data transfers. · Knowledge of federal privacy laws · including FTC acts and regulations (e.g. · Children’s Online Privacy Protection Act · (COPPA)) · healthcare and medical privacy (Health Insurance Portability and Accountability Act (HIPAA) · Health Information · Technology for Economic and Clinical Health (HITECH)) · financial sector privacy (Fair Credit Reporting Act (FCRA) · Fair and · Accurate Credit Transactions Act (FACTA) · Gramm-Leach-Bliley Act (GLBA) · Red Flags Rule · Dodd-Frank Wall Street Reform · and Consumer Protection Act · Consumer Financial Protection Bureau (CFPB)) · education sector privacy (Family Educational · Rights and Privacy Act (FERPA)) · and telecommunications and marketing privacy (Telemarketing Sales Rule (TSR) · Telephone · Consumer Protection Act (TCPA) · Combating the Assault of Non-solicited Pornography and Marketing Act (CAN-SPAM) · Junk · Fax Prevention Act (JFPA) · Telecommunications Act · Cable Communications Policy Act · Video Privacy Protection Act (VPPA)). · Understanding of government and court access to private-sector information · including laws regulating access to financial · data (Right to Financial Privacy Act · Bank Secrecy Act) · communications (Electronic Communications Privacy Act (ECPA) · Communications Assistance to Law Enforcement Act (CALEA)) · national security (Foreign Intelligence Surveillance Act (FISA) · USA-PATRIOT Act · USA Freedom Act · Cybersecurity Information Sharing Act (CISA)) · and civil litigation (Privacy Protection · Act · electronic discovery). · Knowledge of workplace privacy issues · including legal concepts (notice · appropriate expectations of privacy · anti- · discrimination laws) · regulatory agencies (FTC · Department of Labor (DOL) · Equal Employment Opportunity Commission · (EEOC) · National Labor Relations Board (NLRB) · Occupational Safety and Health Administration (OSHA)) · pre-employment · (automated employment decision tools · background checks) · during employment (employee monitoring · ECPA) · and post- · employment (records retention). · Understanding of state privacy laws · including federal and state authority · key concepts and principles of state data privacy · and security laws (e.g. · California Consumer Privacy Act (CCPA) · California Privacy Rights Act (CPRA) · Virginia · Colorado · health data rules · cookie regulations · AI bias laws) · and state data breach notification laws. · Who It’s For · Professionals seeking to demonstrate proficiency in U.S. data protection for compliance and management roles. · Privacy managers · legal compliance officers · and risk managers. · Members of a privacy or compliance team. · Intermediate-level privacy professionals and entry-level professionals aiming to specialize in U.S. privacy law.
- After
- US privacy laws · Regulatory compliance · Sector-specific privacy
- IAPPupdated
Certified Information Privacy Professional/United States
Certified Information Privacy Professional/United States: salary premium low. Recorded by the October catalog audit; review date, not necessarily the issuer effective date.
- IAPPprice change
Certified Information Privacy Professional/United States
Certified Information Privacy Professional/United States: exam cost usd. Recorded by the October catalog audit; review date, not necessarily the issuer effective date.
What changed
- Before
- 550
- After
- Not verified
- IAPPupdated
Certified Information Privacy Professional/United States
Certified Information Privacy Professional/United States: cert url. Recorded by the October catalog audit; review date, not necessarily the issuer effective date.
What changed
- Before
- https://iapp.org/certify/cippus/
- After
- https://www.iapp.org/certify/faqs
- IAPPupdated
Certified Information Privacy Professional/United States
Certified Information Privacy Professional/United States: renewal cost. Recorded by the October catalog audit; review date, not necessarily the issuer effective date.
What changed
- Before
- $250 for a two-year certification term for non-members. The fee is included in the IAPP membership.
- After
- $250 maintenance per certification term or membership ($295/year); 20 CPE per 2-year term.
- IAPPupdated
Certified Information Privacy Professional/United States
Certified Information Privacy Professional/United States: vendor url. Recorded by the October catalog audit; review date, not necessarily the issuer effective date.
- IAPPexam update
Certified Information Privacy Professional/United States
Certified Information Privacy Professional/United States: exam format. Recorded by the October catalog audit; review date, not necessarily the issuer effective date.
What changed
- Before
- 90 multiple-choice questions, 2.5 hours (150 minutes) time limit. Passing score is not publicly available.
- After
- 90 multiple-choice questions; 150 minutes; passing score 300 on the 100–500 reporting scale (not 60%).
- IAPPupdated
Certified Information Privacy Professional/United States
Certified Information Privacy Professional/United States: prerequisites. Recorded by the October catalog audit; review date, not necessarily the issuer effective date.
What changed
- Before
- | There are no formal prerequisites to take the CIPP/US exam. | | Renewal Period | Every 2 years | | Renewal Fee | $250 for a two-year certification term for non-members. The fee is included in the IAPP membership. | | CPE Requirements | 20 CPE hours per two-year renewal period. | | Study Hours | A minimum of 30 hours is recommended by the IAPP. | | Demand | High | |
- After
- Not verified
- IAPPupdated
Certified Information Privacy Professional/United States
Certified Information Privacy Professional/United States: name. Recorded by the October catalog audit; review date, not necessarily the issuer effective date.
What changed
- Before
- IAPP CIPP/US
- After
- Certified Information Privacy Professional/United States