Try 12 free IAPP CIPP/US practice questions
Real exam-style questions taken word for word from the IAPP CIPP/US study guide. Three are below, with the full answer explanation. Enter your email and the full 12-question PDF is yours.
Unlock the full sampler
Three questions to try right now
Work each one before you open the answer. These are the same style and depth as the Certified Information Privacy Professional/United States (CIPP/US) exam expects.
Question 1. Which was NOT one of the five priority areas listed by the Federal Trade Commission in its 2012 report, "Protecting Consumer Privacy in an Era of Rapid Change: Recommendations for Businesses and Policymakers"?
- A. International data transfers
- B. Large platform providers
- C. Promoting enforceable self-regulatory codes
- D. Do Not Track
Show the answer
Answer: A. The FTC's 2012 privacy report "Protecting Consumer Privacy in an Era of Rapid Change" identified five priority areas: data brokers, large platform providers, Do Not Track, mobile privacy, and promoting enforceable self-regulatory codes. International data transfers was not listed as one of those five priorities, making it the correct answer to this "NOT" question.
- B: Large platform providers was explicitly one of the five priority areas in the 2012 report.
- C: Promoting enforceable self-regulatory codes was explicitly listed as a priority area.
- D: Do Not Track was explicitly listed as one of the five priority areas.
Question 2. What important action should a health care provider take if she wants to qualify for funds under the Health Information Technology for Economic and Clinical Health Act (HITECH)?
- A. Make electronic health records (EHRs) part of regular care
- B. Bill the majority of patients electronically for their health care
- C. Send health information and appointment reminders to patients electronically
- D. Keep electronic updates about the Health Insurance Portability and Accountability Act
Show the answer
Answer: A. HITECH's Medicare and Medicaid Electronic Health Record Incentive Programs made federal incentive payments available to eligible healthcare providers who demonstrated meaningful use of certified electronic health record technology. The foundational requirement for qualifying was adopting and demonstrating meaningful use of EHRs as part of regular patient care, not merely billing electronically or sending reminders.
- B: Electronic billing alone does not qualify a provider for HITECH incentive funds; meaningful use of EHRs for clinical care is the standard.
- C: Sending electronic appointment reminders is not a qualifying criterion for HITECH incentive payments.
- D: Tracking regulatory updates about HIPAA is a compliance activity, not a HITECH meaningful-use criterion.
Question 3. What practice do courts commonly require in order to protect certain personal information on documents, whether paper or electronic, that is involved in litigation?
- A. Redaction
- B. Encryption
- C. Deletion
- D. Hashing
Show the answer
Answer: A. Courts routinely require redaction of personal information, such as Social Security numbers, financial account numbers, and dates of birth, from documents filed in litigation to protect individuals' privacy in public court records. Redaction removes or obscures the specific sensitive data while preserving the rest of the document for court proceedings.
- B: Encryption protects data in transit or at rest but does not make documents usable in open court filings; courts cannot read encrypted documents in the record.
- C: Deletion would destroy evidence and is contrary to litigation holds and document preservation obligations.
- D: Hashing is a one-way transformation used for data integrity verification, not a practice used by courts to protect personal information in filed documents.
Unlock the full 12-question sampler
All 12 come with the same written explanations the book uses, covering why the right answer is right. We email you the PDF, nothing else.
What you get
The sampler is free. Here is exactly what lands in your inbox.
Print it or work it on screen, then score yourself against the answer key.
Nothing is written for marketing. Every question is lifted from the study guide itself.
A few days later we send one email with a code for the full study guide. That is the entire sequence.
The full IAPP CIPP/US study guide
The complete guide covers the Certified Information Privacy Professional/United States (CIPP/US) exam objective by objective in plain English, with the full practice question bank behind these samples.
From $20.99
Simply Certified is an independent publisher. CIPP/US is a trademark of the IAPP, which does not sponsor or endorse this product. This page and the sampler are independent study material and are not affiliated with, endorsed by, or sponsored by IAPP.