1.1 Current Exam Facts

What CIPP/US Actually Certifies

The Certified Information Privacy Professional/United States (CIPP/US) is the International Association of Privacy Professionals (IAPP) credential that tests whether you can apply U.S. private-sector privacy law. IAPP’s designation page frames it as proof that you understand U.S. privacy laws and regulations, including legal requirements for transferring sensitive personal data to and from the United States, the European Union, and other jurisdictions. It is a law-and-regulation exam, not a project-management exam (that is Certified Information Privacy Manager (CIPM)) and not a privacy-engineering exam (that is Certified Information Privacy Technologist (CIPT)).

CIPP/US is a personnel certification, not a course-completion badge. The ANSI National Accreditation Board (ANAB) accredits CIPP/US under International Organization for Standardization (ISO) / International Electrotechnical Commission (IEC) 17024:2012. That accreditation is why IAPP keeps training and exam development separate, why the public Body of Knowledge (BoK) is the topic list, and why you should refuse unpublished numbers. If a blog recites a 75-scored / 15-unscored split as if it were printed on the live CIPP/US page, treat that as third-party folklore until IAPP publishes it on the designation page.

There is no formal prerequisite. IAPP does not require a law degree, a privacy job title, or a minimum number of years in practice. Anyone who purchases the exam and satisfies Pearson VUE identity rules may sit. The absence of a gate is not a hint that the sitting is easy. IAPP still tells candidates to plan for a minimum of 30 hours of study, and the five-domain blueprint spans constitutional structure, sectoral federal statutes, government-access authorities, workplace privacy, and a fast-moving state landscape.

Format, Fee, and the One-Year Clock

Buy the exam in the IAPP store, then schedule through the MyIAPP portal into Pearson VUE. Member and non-member store price is the same: $550. That fee buys an exam authorization, not an active credential and not a retake.

The authorization expires. Handbook and FAQ language is consistent: you must schedule and complete the exam within one year of purchase or the exam is closed and the fee is forfeited. You may reschedule, but the one-year clock does not pause for study delays or last-minute appointment shortages. In-person appointments generally need 48 hours’ notice to change; OnVUE remote appointments are more flexible and can be moved until shortly after the scheduled start. A missed appointment is a no-show. A no-show consumes the attempt; you cannot reopen it as a free reschedule.

Question Types: Scenario Stems and Multi-Select Discipline

Every CIPP/US item is multiple choice. Two flavors change how you spend time.

Scenario-based items attach one or more questions to a fact pattern. The stem is longer than a one-line recall prompt. Before you look at the choices, extract four facts: who the actor is (controller, processor, employer, covered entity, data broker), what data is in play (health, financial, children’s, employee, biometric, geolocation), which jurisdiction is doing the work (federal statute, named state, transfer out of the European Union), and what the legal hook is (notice, consent, exception, preemption, private right of action, government compulsory process). Scenario details are not decoration. A hospital that is also a California “business,” or an employer that is also a Fair Credit Reporting Act (FCRA) user, can flip the correct rule.

Multi-select items are labeled. IAPP’s FAQ example is the language you should expect: “Select 3 of the 5 options below.” You must mark the exact number of correct responses. No partial credit is awarded. Two of three correct answers is still a zero on that item. Selecting a fourth extra choice also fails the item. Single-answer items will not accept more than one selection, so the label is the only warning you get. Treat a multi-select as a set: if you are sure of one answer and guessing among the rest, you still need the full set to score the point.

Inside a half, you can move forward and backward and flag items for review. That review window dies when the half is submitted. It does not survive the break.

The Break Rule That Splits the Exam

You have 2.5 hours of testing time. Halfway through, the delivery system offers a scheduled 15-minute break. That break is not a pause button on a single 90-question booklet.

The IAPP Certification Candidate Handbook (v5.3.2, effective 1 June 2026) is explicit. The break divides the exam into two distinct halves. Each half contains half the questions and half the time. Whether you accept or skip the break, you must finish and submit the first half before the second half opens. After that submission, you cannot return to the first half. Flagged items, unanswered items, and “I will come back later” notes in half one are gone.

Plan as if you are sitting two shorter exams, not one long review cycle. A common fail pattern is spending too long on early Domain I scenarios, intending to finish them after a stretch, and then watching the first-half submit lock those items. Build a mid-half checkpoint: if you are not on pace when half the first-half clock is gone, guess, flag only if you still have first-half time, and keep moving.

Unscheduled breaks do not work the same way. At a test center you may leave the room, but the timer does not stop. On OnVUE, leaving the webcam view except during the scheduled break can revoke the exam. Remote rules also ban extra monitors, talking or whispering to yourself, and other programs running beside the OnVUE software.

Delivery Choices: Test Center Versus OnVUE

IAPP delivers CIPP/US two ways, both through Pearson VUE.

In-person testers pick from more than 6,000 Pearson VUE centers. Arrive about 15 minutes early with two qualifying IDs that match the name in MyIAPP. Late arrival can be treated as a no-show. Centers bar electronics and reading material in the exam room. The proctor may discuss procedures, not content.

Remote testers use Pearson VUE OnVUE. IAPP tells candidates to use a personal computer, not a work-issued device, and not to sit the exam through a virtual private network (VPN). Check-in includes a face photo, a government-ID photo, and room scans. Pearson uses artificial intelligence (AI) to assist a human proctor; AI does not make the final eligibility decision. During the sitting you must stay in camera, stay silent, keep other people out of the room, and leave the webcam untouched. The proctor can see you, not the item text, and will not interpret a question for you.

Neither channel changes the content, the 90-item count, the 2.5-hour clock, or the two-half submit rule.

Scoring Basics: 300 Is a Cut Score, Not a Percentage

IAPP reports CIPP/US on a scaled score from 100 to 500. 300 or above passes. The Certification FAQ states, in those words, that 300 does not represent 60%. Do not convert 300/500 into a raw-count target, and do not assume you need 54 of 90.

The cut is set after beta testing, psychometric analysis, and Exam Development Board review. The board decides how many scored items a minimally qualified candidate must answer correctly, then maps that raw cut to 300. A perfect scored performance maps to 500. A 100 is the floor for very low raw scores. Only scored items count toward that conversion.

Some items may be unscored. Unscored items are used in exam development. You will not be told which items they are while you test, so answer every question as if it counts. IAPP’s handbook says the official scored/unscored split is listed on the designation page. The live CIPP/US page does not publish a 75-scored / 15-unscored split. Do not memorize “75 scored” as a CIPP/US fact. The handbook table that maps 50 correct answers to 300 and 75 correct answers to 500 is labeled a fictional scale example. Actual scales vary by form.

You will not receive a raw “X of 90 correct.” After you submit the second half, results are immediate: Pass or Fail plus the scaled score. Test-center sittings can include a printout; every candidate also receives email and can retrieve the report through MyIAPP and Pearson VUE. The report includes domain percentages. Those percentages are diagnostics. They cannot be averaged to reconstruct the overall score, because domains are not equal in size. Failed candidates do not get to review the actual items.

Passing the exam is still not the same as holding an active CIPP/US. Activation requires IAPP membership or a Certification Maintenance Fee. That lifecycle is the next section.

Exam-day traps to lock now

• Do not treat the 15-minute break as a chance to reopen half-one items.
• On a labeled multi-select, select exactly the number requested; two of three is still wrong.
• Do not convert 300 into 60% or into a guaranteed raw number.
• Do not invent a published 75/15 scored split for CIPP/US.
• Confirm the MyIAPP name matches your ID before you travel or launch OnVUE.
• Budget at least the 30 hours IAPP recommends; the sitting has no experience waiver that replaces study.