CIPP/US Study Guide 2026

Confidentiality is essential because it protects sensitive information entrusted to professionals and maintains the trust necessary for effective professional relationships.

FCRA requires a 'reasonable period of time' between the pre-adverse action notice and final adverse action, which the FTC has interpreted as approximately five business days.

ECPA regulates government and private interception of wire, oral, and electronic communications, as well as access to stored electronic communications.

Data minimization is a core privacy principle that dictates organizations should only collect, process, and store the minimum amount of personal data necessary to achieve a specified purpose. This practice reduces the risk of data breaches and misuse, enhances privacy by design, and helps organizations comply with regulations like GDPR and CCPA.

Quality assurance focuses on ensuring that products, services, and processes consistently meet or exceed established standards and stakeholder expectations.

Established methodologies should be reconsidered when new evidence suggests better alternatives, when outcomes decline, or when the operating context changes significantly.