
The course introduction video with downloadable handout, the reference list for the course and Section 1.
The outline is updated from time-to-time, so feel free to check back and see the file revision date.
My main CIPP/US landing page, https://johnbandler.com/cippus/
My section 1 landing page, https://johnbandler.com/cippus/part1/
Also see:
FAQ page at https://johnbandler.com/cipp-us-frequently-asked-questions/
Updates page at https://johnbandler.com/cippus/updates/
Some more details about this course to learn US privacy law and privacy practice and prepare for the Certified Information Privacy Professional (CIPP/US) certification exam, from the IAPP. Quick intros to some important concepts.
Remember these main pages
My main CIPP/US landing page, https://johnbandler.com/cippus/
My section 1 landing page, https://johnbandler.com/cippus/part1/
Some tips on learning, studying, preparing for and taking an exam. For many, this is a refresher, but we can all use a reminder from time to time. This draws from these articles:
•How to Learn and Study, https://johnbandler.com/how-to-learn-and-study/
•How to Take an Exam, https://johnbandler.com/how-to-take-an-exam/
•Scaffolding, Layering, and Learning, https://johnbandler.com/scaffolding-layering-learning/
This lecture is just a placeholder as I update this entire course. Before this lecture are my 2026 updates as I update each section and video in the entire course. After this lecture are my older materials, which are still solid and valid. Thanks for your patience as I completely update this course with new videos. Feel free to continue on past this video. For more on CIPP/US updates, see https://johnbandler.com/cippus/updates/
My editing skills are a little improved with this update, and I am taking extra time to edit, which removes my longer pauses and the worst of my misspeaks and mistakes.
Explore the origins and evolution of privacy, from information and bodily privacy to communications privacy, and learn how privacy law intersects with cybersecurity and regulations like GDPR, CCPA, CPRA.
Explore the US privacy environment, including the structure of US law, enforcement and information management, and key data processing principles such as data subject, data controller, and data processor.
Explore the structure of the US law and its sources, including constitutions and legislation. Analyze jurisdiction, preemption, and the roles of federal and state regulators in privacy enforcement.
Explore civil and administrative enforcement of US privacy and security laws, including contract and tort liability, unfair and deceptive trade practices, and cross-border considerations.
Explore information management from a US perspective, covering data sharing, privacy program development, governance, incident response, vendor management, and international data transfers.
Explore the evolution of privacy and data governance, covering web technologies, data collection, privacy notices, consent, and key laws like Coppa and GDPR, plus vendor management and cross-border transfers.
Discover the FTC's cross-sector privacy protection under the FTC Act, section five, covering unfair or deceptive practices, COPPA, and enforcement on data brokers, big data, IoT, and AI.
Explore how FCRA, FACTA, and GLBA shape financial sector privacy, safeguards, and consumer rights, including identity theft protections, AML/CTF, and regulatory oversight.
Examine telecommunications and marketing privacy rules, including the telemarketing sales rule, TCPA, do-not-call registry, can-spam, wireless domain and CPNI protections. Identify regulators, enforcement, and evolving data ethics in digital advertising.
Examines national security and privacy, detailing FISA, Patriot Act, USA Freedom Act, and Cybersecurity Information Sharing Act, with national security letters, Section 702, Prism, Snowden disclosures, and encryption debates.
Explore the workplace privacy domain, covering before, during, and after employment, including automated decision tools, background screening, and the employer-employee privacy dynamics.
Explore workplace privacy before, during, and after employment, covering background screening, monitoring, investigations, and termination, with emphasis on Fair Credit Reporting Act compliance and data protection.
Explore state data privacy and security laws, including CCPA/CPRA, Virginia CDPA, Colorado Privacy Act, Utah CPA, biometric privacy regulations, facial recognition restrictions, data destruction, breach reporting, and cookie regulations.
Examine state breach notification laws across 50 states, including definitions, triggers, notice requirements, and private rights of action. Learn to tailor privacy and incident response programs to state standards.
Prioritize studying by focusing on the body of knowledge and high-priority details across privacy domains, and set your exam date to guide steady learning and exam readiness.
This course is to help you prepare for the CIPP/US privacy certification exam and be a privacy professional and understand the materials.
This course was originally geared for lawyers and law students. It assumes you have good legal knowledge and good study skills, and walks quickly through the CIPP/US body of knowledge.
Many non-lawyers and non-law students have taken the course and found it helpful and excellent value. If you need help with basic law or basic study skills, please see my other resources or contact me.
CIPP/US is the Certified Information Privacy Professional (United States) certification administered by the International Association of Privacy Professionals (IAPP). It covers a wide area of knowledge, with a heavy focus on privacy and cybersecurity law.
The CIPP/US body of knowledge is good to know, and IAPP (a non-profit) is an organization that provides solid information about privacy.
If you are a law student or a lawyer looking to advance your career and opportunities in data privacy and related areas, CIPP/US is a way to start and give you a boost.
For non-lawyers, learning about privacy and law is also important.
** Construction notice ** Starting August 23, 2026 I am updating the entire course, it will take me several weeks to complete if all goes well (and longer if it doesn't). The older lectures remain solid (priority basics of CIPP/US remain consistent), my handouts and website have updated resources. There will be minor disruption during this update process, as I record each module new, and replace the old, I appreciate your patience. **
I tried to keep this course as short and brief as possible, while still covering the body of knowledge and preparing you with high priority information. This is a start, the rest is up to you.
This course is not for everyone. It is lecture format, PowerPoint slides with main points in bullets, and I lecture as we go through the slides. I decided not to show my face in this course since that makes recording much easier (and some don't want to see my face anyway). I am not a professional entertainer nor comedian, and arguably this proves it. So take the course for the knowledge and information -- not for the entertainment. Take your personal preferences into consideration and see a few sample videos before you decide if this is right for you. If you have a problem or need something, message me.
Previously, I prepared a full length CIPP/US prep course geared for information security professionals at a subscription based infosec online learning platform. That course is still live, and this Udemy course does not compete with that, but provides CIPP/US knowledge in an abbreviated format for a different audience and to help my students.
Building these courses is a hobby for me, I do not have significant video recording skills, nor hardly any video editing skills (it's getting a little better), and there is no production team. It's slide and lectures. This course has almost no editing, so you will hear my pauses and misspeaks, warts and all. The 2026 updates will have minor updates, removing some of those longer pauses and misspeaks.
Course topic note about Udemy topic categories: This course primarily teaches "privacy", "U.S. privacy", "privacy law" "CIPP/US", "IAPP CIPP/US", "privacy and cybersecurity law", and with a US focus.
When this course was first built, Udemy did not have a "privacy" category or a "CIPP/US" category nor a "privacy law" category. So the initial Udemy category wis simply "law". Just remember that "privacy" is an important professional career now, and is not just for lawyers and is not just about law (though law is important for privacy and is also everywhere around us).
Description updated 8/24/2026