U.S. Private-sector Privacy (CIPP/US)

U.S. Private-Sector Privacy CIPP/US provides an overview of data protection laws and regulations in the U.S and an understanding of the legal requirements for the responsible transfer of sensitive personal data to/from the U.S., the EU and other jurisdictions. The U.S. Private-Sector Privacy CIPP/US program was the first professional certification ever to be offered in information privacy. The CIPP/US credential demonstrates a strong foundation in U.S. privacy laws and regulations.
The content of the U.S. Private-Sector Privacy CIPP/US courses is integral to broadening your knowledge, educating your privacy team, and put you on the path to obtaining your privacy certifications.
Course Outline:
- Foundations of privacy and data protection
Discusses the modern history of privacy and data protection, introduces fair information practices and types of personal information, andprovides an overview of data protection roles and privacy protection models. - Comprehensive privacy and data protection laws
Explores reasons for the evolving privacy landscape; reviews major international omnibus privacy and data protection laws with a focus
on the content and impact of the GDPR; examines U.S. state-specific comprehensive privacy laws, including the reasons for a lack of a U.S. federal omnibus privacy law and the impact of the CCPA; outlines applicability thresholds, exemptions and common themes among the comprehensive state laws. - U.S. legal framework
Reviews the branches of the U.S. government and sources of U.S. law; introduces basic legal concepts and terminology commonly used by privacy professionals in the U.S; provides an overview of the federal and state regulatory agencies that create and govern U.S. privacy laws. - Enforcement of U.S. privacy and security laws
Breaks down theories of liability and explores the history, powers and responsibilities of the Federal Trade Commission as well as other
regulatory bodies that enforce U.S. privacy and data security laws. - Information management from a U.S. perspective
Explores information management from a U.S. perspective; outlines the development of a privacy program; reviews the role of privacy
professionals within an organization; discusses vendor management; explains how data inventory and classification can be used to protect privacy; and examines the history and challenges of international data transfers. - Government and court access to private-sector information
Examines how privacy laws impact government and court access to private-sector information; explores rules and regulations on intercepting communications, including how government regulations and private companies work collaboratively with law enforcement to improve cybersecurity; discusses privacy issues related to litigation, including electronic discovery, redaction and protective orders and briefly compares U.S. discovery rules to foreign laws. Laws discussed include the ECPA, the SCA, the CLOUD Act, CALEA, CISA, the RFPA, the PPA, FISA and the FISA Amendments Act, the USA PATRIOT Act and the USA FREEDOM Act. - State data security and sectoral privacy laws
Compares state data breach notification laws including common requirements, exceptions, enforcement and penalties; provides an overview of state data security and data governance laws, as well as other state privacy and security laws, including state sectoral laws that impact data brokers, health and genetic information, biometrics, the use of artificial intelligence and the protection of children’s privacy. - Telecommunications and marketing
Explores rules and regulations that govern telecommunications and marketing entities and briefly discusses how privacy is addressed in the digital advertising realm. Laws covered include the Telemarketing Sales Rule, the Telephone Consumer Protection Act, the CAN-SPAM Act, the Junk Fax Prevention Act, the Telecommunications Act, the Cable Communications Policy Act and the Video Privacy Protection Act. - Health care
Describes privacy laws in health care, including the major components of HIPAA and the development of the Genetic Information NonDiscrimination and Health Information Technology for Economic and Clinical Health acts, and outlines privacy protections mandated by other significant health care laws. - Children’s privacy
Discusses the Children’s Online Privacy Protection Act and state statutes that regulate children’s privacy; outlines privacy rights and
protections under the Family Education Rights and Privacy Act, and describes recent amendments provided by the Protection of Pupil Rights Amendment and Every Student Succeeds Act. Also explores education technology and privacy. - Financial privacy
Outlines the goals of financial privacy laws; highlights key concepts of the Fair Credit Reporting Act, the Fair and Accurate Credit Transactions Act and the Gramm-Leach-Bliley Act; and discusses the Red Flags Rule, the Disposal Rule, the Dodd-Frank Act, online and mobile banking, and anti-money laundering laws. - Privacy in the workplace
Describes federal laws that regulate and protect employee privacy and prohibit discrimination; examines the life cycle of employee privacy,
including background screening, employee monitoring, investigating misconduct and termination; and outlines antidiscrimination laws.
CLASS MATERIALS INCLUDE:
- Two full days of training
- Electronic and hardcopy version of the textbook and the participant guide
- A 1-year IAPP membership with first class (applied to renewal for current IAPP members)
- Voucher to sit for the certification exam
- Voucher for a Certification Study Group*
- Optional refresher course should you fail the IAPP exam **
* Certification Study Group voucher must be used within three months of taking the course.
** The IAPP exam must be taken within three months of completion of the class. Refresher course must be taken within three months of completing the IAPP exam.
*** 1 Year Membership valid with first course taken with Privacy Ref
Classes may be rescheduled up to 10 business days before the start date at no charge. Cancellations receive a credit for a future class.
Upcoming Trainings
Events
- November 17, 2026 4:00 pm
(U.S. Eastern Timezone)
U.S. Private-Sector Privacy (CIPP/US)
Instructor: Ben Siegel, FIP, CIPM, CIPP/E/US, AIGP
- December 22, 2026 4:00 pm
(U.S. Eastern Timezone)
U.S. Private-Sector Privacy (CIPP/US)
Instructor: Ben Siegel, FIP, CIPM, CIPP/E/US, AIGP
- January 15, 2027 4:00 pm
(U.S. Eastern Timezone)
U.S. Private-Sector Privacy (CIPP/US)
Instructor: Ben Siegel, FIP, CIPM, CIPP/E/US, AIGP
- February 16, 2027 4:00 pm
(U.S. Eastern Timezone)
U.S. Private-Sector Privacy (CIPP/US)
Instructor: Ben Siegel, FIP, CIPM, CIPP/E/US, AIGP
- March 16, 2027 4:00 pm
(U.S. Eastern Timezone)
U.S. Private-Sector Privacy (CIPP/US)
Instructor: Ben Siegel, FIP, CIPM, CIPP/E/US, AIGP