ACE Personal Trainer Certification (ACE CPT) guideStudy & preparation

ACE CPT Domain IV: Negligence, the Four Risk-Management Approaches and the Code of Ethics

Risk Management, Professional Conduct, and Ethical Business Practices is 19% of the ACE CPT exam and the domain ACE expanded most in 2023. Here is what its three tasks cover: negligence by omission and commission, the four risk-management approaches, safety and emergencies, the laws the outline names, scope of practice, the ACE Code of Ethics and business basics, with two original practice questions.

Short answer

Domain IV, Risk Management, Professional Conduct, and Ethical Business Practices, is about 19% of the ACE CPT exam, and ACE says it was the largest change in the 2023 outline. Its three tasks cover applying risk-management strategies, laws and safety practices in every setting, staying current with standards, scope of practice and the ACE Code of Ethics, and ethical business practice. Expect questions on negligence by omission or commission, choosing among avoidance, transfer, reduction and retention, emergencies, privacy, referral, and the parts of a business or marketing plan.

The three Domain IV tasks on the ACE CPT

Domain IV is 19% of the exam in the ACE Personal Trainer Exam Content Outline, roughly 24 of the 125 scored questions by Passy's rounding. ACE's announcement of the 2023 outline says "the largest change" came here, with more focus on risk management, ethical business practices, industry standards and scope of practice.

TaskWhat it asks you to doOutline items worth knowing
1. Apply risk managementProtect clients, yourself and others in every setting (virtual, in-person, in-home, in-club, public spaces) under recognized standards and lawsCDC, ACSM, OSHA, FLSA, HIPAA, FERPA and NCMW, emergency response (CPR, AED, first aid, emergency action plans, crisis management), line-of-sight, staging, equipment condition and spotting, environmental conditions, negligence (commission and omission), the risk-management protocol and its four approaches, confidential records (incident reports, waivers, informed consent, SOAP notes)
2. Stay current and in scopeKeep up with standards and your job-related scope of practiceScope of practice, the ACE Code of Ethics, credible organizations and continuing education, privacy on social media, email, texts, apps and wearables, equity, diversity, inclusion and cultural competency, professional boundaries
3. Practice ethical businessRun the business side ethically in every settingThe allied healthcare continuum and the healthcare ethics principles of autonomy, beneficence, non-maleficence and justice, business plans and marketing plans, waivers, permits and professional insurance, behavior-change theories in client decisions, building a referral network

The How Hard Is the ACE CPT Exam? guide lists some of these topics in a paragraph; this guide explains them.

Negligence: omission, commission and what waivers do

ACE's exam prep post Legal Responsibility starts from the standard of care: a professional who fails to act in a reasonable and prudent way commits negligence, which comes in two forms.

TypeACE's definitionACE's example, paraphrased
Act of omissionFailing to act responsiblyNot spotting a client who is lifting a heavy load
Act of commissionPerforming an act, or allowing someone to perform one, that causes harmAsking a client with a known knee injury to do squat jumps

The same post covers the rest of the vocabulary a negligence question can use:

  • Waivers. A liability waiver can protect a trainer if a client is injured, but validity varies from state to state, and a waiver should describe the activities and their risks. Waivers don't protect against gross negligence, which ACE describes as complete recklessness and disregard for others' safety.
  • Contributory negligence. The client contributed to the injury, for example by not mentioning a recent back injury before a deadlift, and can't recover damages.
  • Comparative negligence. Responsibility is divided between trainer and client by the court. ACE says many states use this standard rather than contributory negligence.
  • Insurance. ACE lists general liability, professional liability (it notes a common recommendation of at least $1 million in coverage), umbrella, product liability and key-person ("keyman") insurance.

ACE's February 2025 Certified article Get Your Legal House in Order adds a caution for exam scenarios about documents: sample forms in ACE textbooks are for reference, and trainers should have waivers and similar documents reviewed by legal counsel in their own state.

The risk-management protocol and the four approaches

The outline names the parts of a risk-management protocol (identification, evaluation, approach, implementation and monitoring) and asks you to select among four approaches: avoidance, transfer, reduction and retention. A public university risk-management office (Valdosta State University) defines the four in general terms; the fitness examples in the right-hand column are Passy's illustrations.

ApproachGeneral definitionA personal-training example
AvoidanceNot entering the activity that carries the hazard; not always possible, and it can mean giving up important advantagesCanceling an outdoor session when conditions are extreme
ReductionLowering the risk through procedures, training, limits on participants and preventive maintenanceInspecting equipment, keeping clients in line of sight, spotting, capping class size
TransferShifting the risk to another party, mainly by buying insuranceBuying professional liability insurance
RetentionAccepting the risk, as with an insurance deductible or a risk too costly or impossible to insureAbsorbing the cost of small, low-likelihood losses

One program can use several approaches at once, for example inspecting equipment, carrying insurance and absorbing small losses. Passy's rule of thumb for questions is to look at the verb: not doing the activity is avoidance, making it safer is reduction, paying someone else to carry the loss is transfer, and knowingly carrying it yourself is retention. To drill the distinctions, the four risk-management approaches are planned as ACE CPT flashcards alongside the other outline terms.

Safety, environment and emergencies

Task 1's safety items are concrete: line-of-sight, staging, equipment condition, spotting, the exercise environment and emergency exits. ACE's 2025 legal article adds the habits behind them: follow the manufacturer's maintenance schedule, repair or remove damaged equipment immediately, inspect the space for hazards, and check that a space suits the activity before moving a session into it.

Two settings get special attention in the outline and in ACE's article:

  • Outdoors. Use waivers written for outdoor sessions, have an emergency response plan, confirm cell phones work at the location, check that your insurance covers off-site activity, and get written permission to use public space. The outline also expects you to modify sessions for altitude, extreme weather, temperature, humidity and air pollution.
  • Online. Use waivers and pre-exercise documents that mention online instruction, collect digital informed consent, and plan how you'd respond to an emergency on a client's end of the screen.

For emergencies themselves, the outline lists CPR, AED, first aid, emergency action plans and crisis management, plus documenting what happened. The ACE Code of Ethics commits every certified professional to maintaining current CPR and AED certificates and first-aid knowledge.

Privacy and the laws the outline names

The outline names several laws and bodies without explaining them. What each covers, from its official source:

Name in the outlineWhat it covers
HIPAA (Health Insurance Portability and Accountability Act)The Privacy Rule sets standards for the use and disclosure of protected health information. It applies to covered entities (health plans, clearinghouses and health care providers that transmit health information electronically in certain transactions) and their business associates (CDC)
FERPA (Family Educational Rights and Privacy Act)Privacy rules for education records directly related to a student and maintained by an educational agency or institution (U.S. Department of Education)
FLSA (Fair Labor Standards Act)Minimum wage, overtime pay, recordkeeping and youth employment standards (U.S. Department of Labor)
OSHAThe Occupational Safety and Health Administration, the federal agency that sets and enforces standards for safe and healthful working conditions (USAGov)
CDC, ACSM and NCMWSources of guidelines the outline expects you to know about: the Centers for Disease Control and Prevention, the American College of Sports Medicine and the National Council for Mental Wellbeing

Whether HIPAA governs your work depends on whether you train within or for a covered entity; Passy doesn't give legal advice on that. Confidentiality applies regardless: the Code of Ethics commits you to keeping all client information confidential. ACE's 2025 article suggests storing forms and waivers in a locked cabinet or password-protected files, not leaving paperwork in view, and getting express written consent before sharing a client's information or photos, including before-and-after pictures.

Scope of practice and the ACE Code of Ethics

ACE's 2025 article defines scope of practice as the legal range of services a profession can provide, the settings where it can provide them and the guidelines it must follow. It suggests checking your language and services for words outside a trainer's scope, such as "prescribe," "rehabilitation" or "treatment." The ACE Personal Trainer certification itself, per the Certification and Recertification Handbook, covers training people who are apparently healthy or have medical clearance. The nutrition boundary, from ACE's nutrition scope statement, is laid out in the Domain III guide.

The ACE Code of Ethics has nine principles. In short, an ACE Certified Professional promises to:

  1. Provide safe and effective instruction
  2. Treat all clients equally and fairly
  3. Stay current with health and fitness research and how to apply it
  4. Keep CPR and AED certificates current and know first aid
  5. Follow business, employment and intellectual property laws
  6. Uphold public trust in the health and fitness industry
  7. Keep all client information confidential
  8. Refer clients to more qualified health or medical professionals when appropriate
  9. Set and keep clear professional boundaries

Principle 5 reaches further than people expect. ACE's 2025 article, for example, reminds trainers that playing copyrighted music in sessions, including online, needs a performance license from ASCAP, BMI or SESAC, which clubs often hold as a blanket license.

ACE's Professional Practices and Disciplinary Procedures list the grounds on which ACE may revoke or act on a certification, including exam irregularities, unauthorized use of exam content or ACE materials, misrepresentation or fraud, impairment, negligent or intentional misconduct (such as abuse, disregard for safety or releasing confidential information), certain criminal convictions, and failing to meet certification or recertification requirements. ACE handles alleged violations through a three-tier process of review, hearing and appeals. Renewal also requires agreeing to these documents again, as the ACE CPT recertification guide explains.

Business basics the ACE CPT outline names

Task 3 lists the parts of plans rather than asking you to write one:

ItemComponents the outline lists
Business planExecutive summary, products and services, market analysis, strategy and implementation
Marketing planBusiness initiatives, target market, strategy, channels
Legal documents and proceduresWaivers, permits, professional insurance
Growth and qualityA referral network, technology that serves clients, recruitment and engagement, gathering and acting on client feedback

ACE's 2025 article adds a question that comes before any plan: are you an employee or an independent contractor? It notes that some facilities blur that line because contractors don't receive training, benefits, withholding or workers' compensation, and that independent contractors then choose a structure, such as a sole proprietorship, partnership or corporation. Business terms like these are short-answer material: planned ACE CPT prep allots 209 questions and 84 flashcards to Domain IV, the smallest share, matching its weight.

Two Passy practice questions on Domain IV

These were written by Passy for practice. They are not ACE exam or practice-test items.

1. Which situation is an act of commission, as ACE defines negligence?

  • A. Forgetting to review a new client's health-history form
  • B. Not spotting a client during a near-maximal bench press
  • C. Having a client with a known back injury perform heavy deadlifts
  • D. Failing to report a frayed cable on a gym machine

Keyed answer: C. ACE defines commission as performing an act, or allowing someone to perform one, that causes harm. Directing an injured client into a risky lift is an action. A, B and D are failures to act, which ACE classes as omission.

2. A trainer who runs outdoor boot camps buys professional liability insurance. Which risk-management approach is this?

  • A. Avoidance
  • B. Transfer
  • C. Reduction
  • D. Retention

Keyed answer: B. Buying insurance shifts the financial consequences of a loss to another party, which is transfer. Avoidance would mean not running the boot camp, reduction would mean making it safer (for example, inspecting the site), and retention would mean knowingly carrying the cost of a loss yourself.

Your next step for ACE CPT Domain IV

Read the nine Code of Ethics principles and, for each, write one client situation that would test it. Then take the 20 free ACE CPT practice questions and check whether your misses cluster in this domain. Because Domain IV questions often hide inside program-design scenarios, mix Domain IV items with the other three domains in planned ACE CPT practice rather than drilling it alone.

Trust the source

Official sources

Exam policies can change. Use these primary sources for the most current details.