CATALOGUECOURSESCIPP/US – Certified Information Privacy Professional / US
    GRC Compliance Certification
    [ liaison ]
    BODY: IAPP

    "The Certified Information Privacy Professional for the United States (CIPP/US) is an industry-leading credential offered by the IAPP. It validates a professional's mastery of the intricate U.S. privacy landscape, including federal and state regulations, civil privacy laws, and sector-specific data protection mandates. This curriculum equips governance, risk, and compliance professionals with the clinical expertise required to execute Privacy Impact Assessments, manage Data Subject Access Requests, and architect legally defensible data privacy frameworks."

    The Certified Information Privacy Professional / United States (CIPP/US) is an elite, globally recognized credential provided by the International Association of Privacy Professionals (IAPP). This course delivers a highly comprehensive, clinical examination of the U.S. privacy landscape, equipping governance, risk, and compliance (GRC) liaisons with the critical knowledge required to navigate complex data protection regulations. The curriculum deeply explores sector-specific federal frameworks such as HIPAA, GLBA, and COPPA, alongside sweeping state-level mandates like the California Consumer Privacy Act (CCPA). Candidates will master procedural standards for executing Privacy Impact Assessments (PIAs), orchestrating enterprise-wide data mapping, managing Data Subject Access Requests (DSARs), and establishing legally defensible privacy policies. By bridging the gap between legal statutes and operational security, this course empowers professionals to mitigate regulatory exposure, champion privacy by design, and architect resilient data governance programs.

    Certifying BodyIAPPAccreditation Authority
    Estimated Time27 HoursRecommended Preparation
    Skills Tested5 CompetenciesAtomic Units Mapped
    SecNav Verification
    Active Audit Node
    Simulation Ready

    [01] Hands-On Verification Sandboxes (Live Simulations)

    Deploy into hands-on sandbox simulations mapped directly to CIPP/US – Certified Information Privacy Professional / US objectives. Verify your readiness under real-world conditions:

    Verification Available

    Insider Threat Protocol Overhaul

    ID: SECM-5004Deploy
    Verification Available

    OT Infrastructure Upgrade Review

    ID: SECM-6924Deploy
    Verification Available

    Lateral Movement at Arctos ClearVault

    ID: SECM-2187Deploy

    [ EDITORIAL_INDEPENDENCE_NOTICE ]

    SecNav is not a commercial partner for this course. We do not receive compensation, referral commissions, or affiliate fees from IAPP for indexing this credential. We map this path purely for its educational merit and alignment with career progression.

    PROVIDER_INTEL

    [02] Exam Curriculum & Syllabus Modules

    6 Modules Indexed

    Structured domain syllabus and core learning outcomes covered in the CIPP/US – Certified Information Privacy Professional / US examination blueprint:

    MODULE // 01
    ~4h

    Module 1: Introduction to the U.S. Privacy Environment

    • •U.S. Legal System Foundations
    • •Federal Trade Commission (FTC) Jurisdiction and Enforcement
    • •Information Management and Data Governance Models
    MODULE // 02
    ~6h

    Module 2: Limits on Private-Sector Collection and Use of Data

    • •Healthcare Privacy (HIPAA/HITECH)
    • •Financial Privacy (GLBA, FCRA, FACTA)
    • •Children's Privacy (COPPA)
    • •Telecommunications and Marketing (TCPA, CAN-SPAM)
    MODULE // 03
    ~4h

    Module 3: Government and Court Access to Private-Sector Information

    • •Law Enforcement Access and the Fourth Amendment
    • •National Security and Foreign Intelligence Surveillance Act (FISA)
    • •Civil Litigation and E-Discovery Management
    MODULE // 04
    ~3h

    Module 4: Workplace Privacy

    • •Employee Monitoring and Surveillance
    • •Background Checks and the FCRA in Employment
    • •Internal Investigations and Employee Data Handling
    MODULE // 05
    ~5h

    Module 5: State Privacy Laws

    • •California Consumer Privacy Act (CCPA) and CPRA
    • •Emerging State Privacy Frameworks (VCDPA, CPA)
    • •State Data Breach Notification Laws
    MODULE // 06
    ~5h

    Module 6: Privacy Program Management and Operations

    • •Data Mapping and Inventory Systems
    • •Privacy Impact Assessments (PIAs)
    • •Data Subject Access Request (DSAR) Processing
    • •Security Policy Authoring and Privacy by Design

    [03] Skills Validated by This Certification

    The CIPP/US – Certified Information Privacy Professional / US curriculum tests and measures critical capabilities across these essential governance, risk & compliance (GRC) skills. Explore the dedicated skills nodes below:

    [04] Career Pathways & Target Roles

    Securing a verified status in CIPP/US – Certified Information Privacy Professional / US is a high-value accelerator for major compliance & GRC career paths. Learn more about the primary roles mapping to this pathway:

    [05] Frequently Asked Questions about CIPP/US – Certified Information Privacy Professional / US

    Yes, absolutely! You can verify your real-world readiness by launching the following active-threat sandbox simulations on our platform: Insider Threat Protocol Overhaul, OT Infrastructure Upgrade Review, Lateral Movement at Arctos ClearVault. Completing these sandboxes grants cryptographically signed proof and reward XP.
    The CIPP/US curriculum rigorously covers sector-specific federal laws such as HIPAA, GLBA, and COPPA, alongside comprehensive state-level privacy mandates like the California Consumer Privacy Act (CCPA) and the Virginia Consumer Data Protection Act (VCDPA).
    CIPP/US certified professionals operationalize privacy by design, conducting Privacy Impact Assessments (PIAs) and architecting comprehensive data mapping inventories to ensure data lifecycle compliance and mitigate regulatory exposure.
    This credential is fundamentally designed for legal counsel, privacy engineers, compliance officers, and GRC liaisons responsible for navigating U.S. data protection statutes and orchestrating enterprise-wide privacy programs.

    [06] Authoritative Sources & Certification References

    Certifying Body & Official Resources

    Official Registration URLDirect Link
    https://iapp.org/
    NIST Privacy Framework v1.0 ReferenceID.IM-P
    Official Link
    NIST Cybersecurity Framework (CSF) 2.0 ReferencePR.DS
    Official Link