CIPP Study Guide 2026

Everything you need to pass the CIPP exam in one place: the exam format, every topic to study, real practice questions with explanations, flashcards, and full-length practice tests. Free, no sign-up needed.

📋 CIPP Exam Format at a Glance

90
Questions
150 min
Time Limit
68.00%
Passing Score

📚 CIPP Topics to Study (23)

✍️ Sample CIPP Questions & Answers

1. What are the civil monetary penalty tiers under HIPAA, reflecting the level of culpability?
Did not know, reasonable cause, willful neglect corrected, willful neglect not corrected — escalating from $100 to $50,000 per violation

HIPAA's tiered civil monetary penalty structure ranges from $100/violation (did not know) to $50,000/violation (willful neglect not corrected), with annual caps per violation category.

2. Under the Video Privacy Protection Act (VPPA), what is prohibited?
Disclosing a person's video rental or purchase records without consent

The VPPA prohibits video tape service providers from knowingly disclosing personally identifiable information about consumers' video rental or purchase records without consent.

3. Under FERPA, when does a student's (not parent's) right to control education records begin?
When the student turns 18 or attends a postsecondary institution

FERPA rights transfer from parents to the student (who becomes an 'eligible student') when the student turns 18 or enrolls in a postsecondary school, whichever comes first.

4. What FCRA requirement must employers fulfill BEFORE taking adverse action based on a background check report?
Provide the applicant with a copy of the report and a pre-adverse action notice

FCRA requires employers to provide applicants with a copy of the consumer report and a pre-adverse action notice giving them opportunity to dispute inaccuracies before taking adverse action.

5. What must an employer's acceptable use policy for workplace technology typically address to protect against employee privacy claims?
Notice that monitoring may occur and there is no expectation of privacy on employer systems

Clearly communicating that there is no expectation of privacy on employer systems reduces employee privacy claims and establishes the employer's right to monitor.

6. The Fair and Accurate Credit Transactions Act (FACTA) most significantly amended FCRA by establishing:
The right to one free credit report per year from each major consumer reporting agency

FACTA created the right for consumers to obtain one free credit report annually from each of the three major CRAs — Equifax, Experian, and TransUnion — through AnnualCreditReport.com.

🎯 Free CIPP Practice Tests

📖 CIPP Guides & Articles

Your CIPP Study Path
1. Learn with Flashcards → 2. Drill Practice Tests → 3. Take the Full Exam Simulation