AIGP Exam Guide 2026: FREE IAPP AI Governance Prep
Video
How is the U.S. privacy model most often described in contrast to the EU approach?
Cipp Us Us Privacy Environment
Question · Easy
AIGP exam guide 2026: IAPP AI Governance Professional, $649/$799 fee, 100 questions, 2h 45min, 300/500 pass, BoK v2.1 4 domains. FREE practice + study plan.
Blog
Which common-law privacy tort is most closely associated with intentional invasion of someone's private space or affairs?
Introduction & Exam Overview
1.1 Current Exam Facts
Study guide
Why is contract law important in U.S. privacy compliance?
Question · Medium
Tech Exam Prep Podcast
Listen on Spotify
Podcast
What is the FTC's core private-sector privacy enforcement hook in the absence of a general federal privacy statute?
Which regulator is most directly associated with HIPAA Privacy Rule enforcement?
What is the main purpose of a data inventory in a privacy program?
1.2 BoK 2.6.1, Scoring, Activation, CPE, and 2026 Updates
Which statement best describes data minimization?
A company keeps customer identity documents forever because storage is cheap. Which privacy principle is most directly undermined?
Which activity is most useful for understanding vendor-related privacy risk?
What best distinguishes privacy from security?
Domain I: The U.S. Legal Framework
2.1 Branches of Government and Their Privacy Roles
Which statement about de-identified data is most accurate in U.S. privacy practice?
A privacy officer wants product teams to consider data use, access, retention, and choice early in development. Which concept is this?
Which U.S. enforcement risk is created when a company publishes a clear privacy promise but operates differently in practice?
Which organization most likely acts as a privacy regulator rather than a privacy litigant or vendor?
2.2 Sources of U.S. Privacy Law
What is the main privacy benefit of role-based access controls?
Which statement best reflects U.S. privacy program accountability?
A privacy impact assessment is most useful when:
Which practice best supports defensible retention and deletion?
2.3 Scope, Jurisdiction, Preemption, and Private Rights of Action
What is the strongest reason to map personal-data flows across systems and vendors?
Which statement about sensitive data is most accurate?
A company begins using purchase-history data to assess employee productivity, even though the data was collected for customer support. Which principle is most directly implicated?
Question · Hard
Which description best fits a processor or service-provider relationship in modern privacy practice?
2.4 Major Regulatory Authorities
Which statement is most accurate about breach response planning?
Which statement best captures the role of notice in a privacy program?
Which action most directly supports vendor accountability after contract signing?
When a company shares personal data with a foreign analytics vendor, which question is most important first?
Domain I: Self-Regulation, Liability, and Enforcement
3.1 Self-Regulatory Models
What is the EU-U.S. Data Privacy Framework primarily used for?
After Schrems II, why do organizations often evaluate supplementary measures alongside standard contractual clauses?
Which statement about cross-border transfers is most accurate?
What is an onward transfer in a cross-border privacy context?
3.2 Contract, Tort, Fiduciary Duty, Negligence, and UDAP
Which statement best describes a privacy office's role in governance?
Which choice best illustrates collection limitation?
Which scenario most strongly suggests a need for a formal risk assessment?
Which factor most often makes a privacy notice misleading?
3.3 Federal and State Enforcement Authorities
What is the strongest privacy rationale for training employees on acceptable data handling?
Which statement about state attorneys general is most accurate in the privacy context?
Loading more…
