IAPP CIPP/US Practice Test
Use the free 20-question sets to find the part of the CIPP/US blueprint that is costing you marks. When you need a full rehearsal, move to the 90-question, 150-minute practice tests built to the same current Body of Knowledge.
Mixed set — CIPP/US Practice Tests
Each mixed set gives you 20 questions in about 33 minutes. The questions move across all five CIPP/US domains, so they work well as a quick benchmark before you decide what to study next.
Domain-wise — CIPP/US Practice Tests
A mixed set tells you there is a gap. These five 20-question tests tell you where it is. IAPP publishes question ranges rather than fixed percentage weights, so each card shows the official range for a 90-question exam.
Twenty questions finds the weak spot.
Ninety questions tests whether your pace holds.
The free sets are built for diagnosis. The full-length tests are the dress rehearsal: 90 questions, 150 minutes, all five CIPP/US domains, and the same v2.6.1 taxonomy used across the ten paid banks.
| Free tests above | Full-length tests | |
|---|---|---|
| Questions | 20 | 90 |
| Time limit | ~33 minutes | 150 minutes |
| Coverage | Mixed sample or one domain | All five domains in one test |
| Score you get | Not claimed on the short-set page | Practice score against the 300 target |
| Per-domain breakdown | Not claimed on the short-set page | All five domains tested in one full-length run |
| Choose-TWO | Not claimed on the short-set page | 10 Select TWO questions per test |
| Exam conditions | Short timed set | Full 150-minute pacing test |
| Report | Not claimed on the short-set page | Explanation attached to every question |
| Number available | 10 free tests | 10 full-length tests · 900 questions |
| Price | Free | From $2.99₹119£2.39€2.69 for one test |
How to use these tests in a study plan
Use the short sets first. Save the 90-question tests for the point where the issue is no longer “Do I know this law?” and becomes “Can I keep making the right call for two and a half hours?”
Benchmark
Take two mixed sets before another revision pass. Look for the domain that keeps producing the same kind of miss.
Start with Practice Test 1 →Drill the gap
Move into the matching domain test. A 20-question focused set gives you enough repetition to see whether the problem is recall, scope or legal authority.
Start with Domain 1 →Dress rehearsal
When the domain gaps stop jumping out, sit a 90-question test under the full 150-minute clock. That is where pacing and second-guessing show up.
Get Full-Length Tests →About the IAPP CIPP/US exam
CIPP/US covers U.S. private-sector privacy law and the legal frameworks privacy professionals use in practice. The current exam is delivered through Pearson VUE and can be taken at a test center or remotely through OnVUE.
Exam format
Questions: 90 multiple-choice questions. Some are scenario-based, and multi-select questions require the exact number of correct responses.
Duration: 2.5 hours, with a scheduled 15-minute break.
Passing score: 300 on IAPP's 100–500 reporting scale. It does not mean 60%.
Exam fee: US$550.
Purchase window: The exam must be completed within one year of purchase.
Certification maintenance
Activation: After passing, certification requires either active IAPP membership or a Certification Maintenance Fee.
CMF: US$250 for a certification term when you are not maintaining IAPP membership.
CPE requirement: 20 continuing professional education credits per certification term.
Retakes: A new attempt can be purchased after the result posts to MyIAPP. The next appointment cannot be scheduled sooner than seven days after the prior attempt.
CIPP/US exam blueprint
IAPP publishes minimum and maximum question counts for each topic area. That is more useful than inventing a fixed percentage, because the exact mix can move inside those ranges from one exam form to another.
| Domain | Topic | Official range |
|---|---|---|
| Domain 1 | The U.S. Privacy Environment | 27–33 questions |
| Domain 2 | Federal Privacy Laws | 15–19 questions |
| Domain 3 | Government and Court Access to Private-sector Information | 3–5 questions |
| Domain 4 | Workplace Privacy | 4–6 questions |
| Domain 5 | State Privacy Laws | 17–21 questions |
How our CIPP/US practice tests are written
Built to the current Body of Knowledge. The question banks use CIPP/US Body of Knowledge v2.6.1, effective 1 September 2025, across the five current domains.
Law in context. A large share of the questions are application-led: deciding which authority matters, which sector rule controls, or which privacy-program response fits the facts. That is closer to privacy work than a wall of acronym definitions.
Domain ranges stay visible. The mixed sets spread questions across the whole blueprint. The domain-wise tests then let you work one area without pretending IAPP uses fixed percentages where it publishes ranges.
Full-length banks go deeper. Each 90-question bank contains 80 single-answer questions and 10 Select TWO questions, with an explanation attached to every item.
CIPP/US exam preparation tips
Study strategy
Start with the Body of Knowledge. IAPP says the exam is built from that document, so it is the cleanest boundary for what deserves study time.
Spend time in proportion. The U.S. Privacy Environment, Federal Privacy Laws and State Privacy Laws carry far more questions than the two smaller domains.
Study scope, not just names. Knowing HIPAA, FCRA, FERPA or the FTC Act exists is the easy part. The harder part is spotting when each one applies and what changes the answer.
Test-taking strategy
Read the jurisdiction and sector first. Many CIPP/US distractors are real rules that belong to the wrong regulator, industry or legal source.
Keep the clock boring. Two and a half hours sounds generous until a few hard scenarios each take four minutes. Move, flag mentally, and protect the later questions.
Respect multi-select wording. IAPP awards no partial credit on multi-select questions. If it says select a specific number, you need that exact set.
Frequently asked questions
Diagnose for free. Rehearse at full length.
Start with a 20-question set. When you're ready to test the whole blueprint under the real 150-minute pace, move to a full-length CIPP/US practice test.
CIPP/US exam details reviewed against IAPP's published certification information in September 2026.
Authors
-
Security Practice Test Editorial Team is the expert content team at SecurityPracticeTest.com dedicated to producing authoritative cybersecurity certification exam-prep resources. We create comprehensive practice tests, study materials, and exam-focused content for top security certifications including CompTIA Security+, SecurityX, PenTest+, CISSP, CCSP, SSCP, Certified in Cybersecurity (CC), CGRC, CISM, SC-900, SC-200, AZ-500, AWS Certified Security - Specialty, Professional Cloud Security Engineer, OSCP+, GIAC certifications, CREST certifications, Check Point, Cisco, Fortinet, and Palo Alto Networks exams. Our content is developed through careful review of official exam objectives, cybersecurity knowledge domains, and practical job-relevant concepts to help learners build confidence, strengthen understanding, and prepare effectively for certification success.
-
Sudhanshu Thakur: ReviewerEnterprise Technology and Digital Transformation Professional with 18+ years of experience in enterprise software, SaaS, industrial automation, and business consulting. Formerly associated with Rockwell Automation, Tech Mahindra, Emerson, ABB, L&T Infotech, and Hewlett Packard Enterprise.