IAPP Certification

IAPP CIPP/US Practice Test

Use the free 20-question sets to find the part of the CIPP/US blueprint that is costing you marks. When you need a full rehearsal, move to the 90-question, 150-minute practice tests built to the same current Body of Knowledge.

10Free practice tests
200Free questions
5Blueprint domains
300IAPP pass score

Mixed set — CIPP/US Practice Tests

Each mixed set gives you 20 questions in about 33 minutes. The questions move across all five CIPP/US domains, so they work well as a quick benchmark before you decide what to study next.

Twenty questions finds the weak spot.
Ninety questions tests whether your pace holds.

The free sets are built for diagnosis. The full-length tests are the dress rehearsal: 90 questions, 150 minutes, all five CIPP/US domains, and the same v2.6.1 taxonomy used across the ten paid banks.

 Free tests aboveFull-length tests
Questions2090
Time limit~33 minutes150 minutes
CoverageMixed sample or one domainAll five domains in one test
Score you getNot claimed on the short-set pagePractice score against the 300 target
Per-domain breakdownNot claimed on the short-set pageAll five domains tested in one full-length run
Choose-TWONot claimed on the short-set page10 Select TWO questions per test
Exam conditionsShort timed setFull 150-minute pacing test
ReportNot claimed on the short-set pageExplanation attached to every question
Number available10 free tests10 full-length tests · 900 questions
PriceFreeFrom $2.99₹119£2.39€2.69 for one test
See All 10 Full-Length Tests → One test, five-test pack, or all ten.

How to use these tests in a study plan

Use the short sets first. Save the 90-question tests for the point where the issue is no longer “Do I know this law?” and becomes “Can I keep making the right call for two and a half hours?”

1

Benchmark

Take two mixed sets before another revision pass. Look for the domain that keeps producing the same kind of miss.

Start with Practice Test 1 →
2

Drill the gap

Move into the matching domain test. A 20-question focused set gives you enough repetition to see whether the problem is recall, scope or legal authority.

Start with Domain 1 →
3

Dress rehearsal

When the domain gaps stop jumping out, sit a 90-question test under the full 150-minute clock. That is where pacing and second-guessing show up.

Get Full-Length Tests →

About the IAPP CIPP/US exam

CIPP/US covers U.S. private-sector privacy law and the legal frameworks privacy professionals use in practice. The current exam is delivered through Pearson VUE and can be taken at a test center or remotely through OnVUE.

Exam format

Questions: 90 multiple-choice questions. Some are scenario-based, and multi-select questions require the exact number of correct responses.

Duration: 2.5 hours, with a scheduled 15-minute break.

Passing score: 300 on IAPP's 100–500 reporting scale. It does not mean 60%.

Exam fee: US$550.

Purchase window: The exam must be completed within one year of purchase.

Certification maintenance

Activation: After passing, certification requires either active IAPP membership or a Certification Maintenance Fee.

CMF: US$250 for a certification term when you are not maintaining IAPP membership.

CPE requirement: 20 continuing professional education credits per certification term.

Retakes: A new attempt can be purchased after the result posts to MyIAPP. The next appointment cannot be scheduled sooner than seven days after the prior attempt.

CIPP/US exam blueprint

IAPP publishes minimum and maximum question counts for each topic area. That is more useful than inventing a fixed percentage, because the exact mix can move inside those ranges from one exam form to another.

DomainTopicOfficial range
Domain 1The U.S. Privacy Environment27–33 questions
Domain 2Federal Privacy Laws15–19 questions
Domain 3Government and Court Access to Private-sector Information3–5 questions
Domain 4Workplace Privacy4–6 questions
Domain 5State Privacy Laws17–21 questions

How our CIPP/US practice tests are written

Built to the current Body of Knowledge. The question banks use CIPP/US Body of Knowledge v2.6.1, effective 1 September 2025, across the five current domains.

Law in context. A large share of the questions are application-led: deciding which authority matters, which sector rule controls, or which privacy-program response fits the facts. That is closer to privacy work than a wall of acronym definitions.

Domain ranges stay visible. The mixed sets spread questions across the whole blueprint. The domain-wise tests then let you work one area without pretending IAPP uses fixed percentages where it publishes ranges.

Full-length banks go deeper. Each 90-question bank contains 80 single-answer questions and 10 Select TWO questions, with an explanation attached to every item.

CIPP/US exam preparation tips

Study strategy

Start with the Body of Knowledge. IAPP says the exam is built from that document, so it is the cleanest boundary for what deserves study time.

Spend time in proportion. The U.S. Privacy Environment, Federal Privacy Laws and State Privacy Laws carry far more questions than the two smaller domains.

Study scope, not just names. Knowing HIPAA, FCRA, FERPA or the FTC Act exists is the easy part. The harder part is spotting when each one applies and what changes the answer.

Test-taking strategy

Read the jurisdiction and sector first. Many CIPP/US distractors are real rules that belong to the wrong regulator, industry or legal source.

Keep the clock boring. Two and a half hours sounds generous until a few hard scenarios each take four minutes. Move, flag mentally, and protect the later questions.

Respect multi-select wording. IAPP awards no partial credit on multi-select questions. If it says select a specific number, you need that exact set.

Frequently asked questions

How many questions are on the CIPP/US exam?+
The current CIPP/US exam has 90 multiple-choice questions and a 2.5-hour time limit.
What score do I need to pass CIPP/US?+
The passing score is 300 on IAPP's 100–500 reporting scale. IAPP explicitly notes that 300 does not mean 60%.
Does CIPP/US include multi-select questions?+
Yes. IAPP uses multi-select questions and requires the exact number of correct responses shown in the stem. There is no partial credit on those items.
How long should I study?+
IAPP recommends planning for at least 30 hours of study. Your starting point matters, so use the free mixed and domain tests to decide where those hours should go.
Are the practice tests on this page free?+
Yes. The five mixed sets and five domain-wise tests on this page are free.
Do you have full-length CIPP/US practice tests?+
Yes. The IAPP CIPP/US full-length practice tests contain 90 questions in 150 minutes and cover all five current domains. Ten full-length tests are available, with single-test pricing from $2.99₹119£2.39€2.69.
How soon can I retake the IAPP exam after failing?+
After the failed result appears in MyIAPP, you can purchase another attempt. The next appointment cannot be scheduled sooner than seven days after the prior attempt.
What does it take to keep the certification active?+
You need the required CPE credits and either active IAPP membership or the certification maintenance fee. IAPP currently requires 20 CPE credits per certification term, and the nonmember CMF is US$250 for the term.

Diagnose for free. Rehearse at full length.

Start with a 20-question set. When you're ready to test the whole blueprint under the real 150-minute pace, move to a full-length CIPP/US practice test.

CIPP/US exam details reviewed against IAPP's published certification information in September 2026.

Authors

  • Security Practice Test Editorial Team

    Security Practice Test Editorial Team is the expert content team at SecurityPracticeTest.com dedicated to producing authoritative cybersecurity certification exam-prep resources. We create comprehensive practice tests, study materials, and exam-focused content for top security certifications including CompTIA Security+, SecurityX, PenTest+, CISSP, CCSP, SSCP, Certified in Cybersecurity (CC), CGRC, CISM, SC-900, SC-200, AZ-500, AWS Certified Security - Specialty, Professional Cloud Security Engineer, OSCP+, GIAC certifications, CREST certifications, Check Point, Cisco, Fortinet, and Palo Alto Networks exams. Our content is developed through careful review of official exam objectives, cybersecurity knowledge domains, and practical job-relevant concepts to help learners build confidence, strengthen understanding, and prepare effectively for certification success.

  • Sudhanshu Thakur - Reviewer

    Enterprise Technology and Digital Transformation Professional with 18+ years of experience in enterprise software, SaaS, industrial automation, and business consulting. Formerly associated with Rockwell Automation, Tech Mahindra, Emerson, ABB, L&T Infotech, and Hewlett Packard Enterprise.