CIPP Study Guide 2026

Everything you need to pass the CIPP exam in one place: the exam format, every topic to study, real practice questions with explanations, flashcards, and full-length practice tests. Free, no sign-up needed.

📋 CIPP Exam Format at a Glance

90
Questions
150 min
Time Limit
68.00%
Passing Score

📚 CIPP Topics to Study (31)

✍️ Sample CIPP Questions & Answers

1. What are the civil monetary penalty tiers under HIPAA, reflecting the level of culpability?
Did not know, reasonable cause, willful neglect corrected, willful neglect not corrected — escalating from $100 to $50,000 per violation

HIPAA's tiered civil monetary penalty structure ranges from $100/violation (did not know) to $50,000/violation (willful neglect not corrected), with annual caps per violation category.

2. Under HIPAA's Minimum Necessary standard, a nurse reviewing a patient's chart should access:
Only the PHI necessary to perform her specific job function

The Minimum Necessary standard requires workforce members to access only the PHI needed to accomplish their intended purpose.

3. Under the Video Privacy Protection Act (VPPA), what is prohibited?
Disclosing a person's video rental or purchase records without consent

The VPPA prohibits video tape service providers from knowingly disclosing personally identifiable information about consumers' video rental or purchase records without consent.

4. Under FERPA, when does a student's (not parent's) right to control education records begin?
When the student turns 18 or attends a postsecondary institution

FERPA rights transfer from parents to the student (who becomes an 'eligible student') when the student turns 18 or enrolls in a postsecondary school, whichever comes first.

5. What FCRA requirement must employers fulfill BEFORE taking adverse action based on a background check report?
Provide the applicant with a copy of the report and a pre-adverse action notice

FCRA requires employers to provide applicants with a copy of the consumer report and a pre-adverse action notice giving them opportunity to dispute inaccuracies before taking adverse action.

6. What must an employer's acceptable use policy for workplace technology typically address to protect against employee privacy claims?
Notice that monitoring may occur and there is no expectation of privacy on employer systems

Clearly communicating that there is no expectation of privacy on employer systems reduces employee privacy claims and establishes the employer's right to monitor.

🎯 Free CIPP Practice Tests

📖 CIPP Guides & Articles

Your CIPP Study Path
1. Learn with Flashcards → 2. Drill Practice Tests → 3. Take the Full Exam Simulation
Was this helpful?