ACE Personal Trainer Certification (ACE CPT) guideStudy & preparation
ACE CPT Domain IV: Negligence, the Four Risk-Management Approaches and the Code of Ethics
Risk Management, Professional Conduct, and Ethical Business Practices is 19% of the ACE CPT exam and the domain ACE expanded most in 2023. Here is what its three tasks cover: negligence by omission and commission, the four risk-management approaches, safety and emergencies, the laws the outline names, scope of practice, the ACE Code of Ethics and business basics, with two original practice questions.
Short answer
Domain IV, Risk Management, Professional Conduct, and Ethical Business Practices, is about 19% of the ACE CPT exam, and ACE says it was the largest change in the 2023 outline. Its three tasks cover applying risk-management strategies, laws and safety practices in every setting, staying current with standards, scope of practice and the ACE Code of Ethics, and ethical business practice. Expect questions on negligence by omission or commission, choosing among avoidance, transfer, reduction and retention, emergencies, privacy, referral, and the parts of a business or marketing plan.
The three Domain IV tasks on the ACE CPT
Domain IV is 19% of the exam in the ACE Personal Trainer Exam Content Outline, roughly 24 of the 125 scored questions by Passy's rounding. ACE's announcement of the 2023 outline says "the largest change" came here, with more focus on risk management, ethical business practices, industry standards and scope of practice.
| Task | What it asks you to do | Outline items worth knowing |
|---|---|---|
| 1. Apply risk management | Protect clients, yourself and others in every setting (virtual, in-person, in-home, in-club, public spaces) under recognized standards and laws | CDC, ACSM, OSHA, FLSA, HIPAA, FERPA and NCMW, emergency response (CPR, AED, first aid, emergency action plans, crisis management), line-of-sight, staging, equipment condition and spotting, environmental conditions, negligence (commission and omission), the risk-management protocol and its four approaches, confidential records (incident reports, waivers, informed consent, SOAP notes) |
| 2. Stay current and in scope | Keep up with standards and your job-related scope of practice | Scope of practice, the ACE Code of Ethics, credible organizations and continuing education, privacy on social media, email, texts, apps and wearables, equity, diversity, inclusion and cultural competency, professional boundaries |
| 3. Practice ethical business | Run the business side ethically in every setting | The allied healthcare continuum and the healthcare ethics principles of autonomy, beneficence, non-maleficence and justice, business plans and marketing plans, waivers, permits and professional insurance, behavior-change theories in client decisions, building a referral network |
The How Hard Is the ACE CPT Exam? guide lists some of these topics in a paragraph; this guide explains them.
Negligence: omission, commission and what waivers do
ACE's exam prep post Legal Responsibility starts from the standard of care: a professional who fails to act in a reasonable and prudent way commits negligence, which comes in two forms.
| Type | ACE's definition | ACE's example, paraphrased |
|---|---|---|
| Act of omission | Failing to act responsibly | Not spotting a client who is lifting a heavy load |
| Act of commission | Performing an act, or allowing someone to perform one, that causes harm | Asking a client with a known knee injury to do squat jumps |
The same post covers the rest of the vocabulary a negligence question can use:
- Waivers. A liability waiver can protect a trainer if a client is injured, but validity varies from state to state, and a waiver should describe the activities and their risks. Waivers don't protect against gross negligence, which ACE describes as complete recklessness and disregard for others' safety.
- Contributory negligence. The client contributed to the injury, for example by not mentioning a recent back injury before a deadlift, and can't recover damages.
- Comparative negligence. Responsibility is divided between trainer and client by the court. ACE says many states use this standard rather than contributory negligence.
- Insurance. ACE lists general liability, professional liability (it notes a common recommendation of at least $1 million in coverage), umbrella, product liability and key-person ("keyman") insurance.
ACE's February 2025 Certified article Get Your Legal House in Order adds a caution for exam scenarios about documents: sample forms in ACE textbooks are for reference, and trainers should have waivers and similar documents reviewed by legal counsel in their own state.
The risk-management protocol and the four approaches
The outline names the parts of a risk-management protocol (identification, evaluation, approach, implementation and monitoring) and asks you to select among four approaches: avoidance, transfer, reduction and retention. A public university risk-management office (Valdosta State University) defines the four in general terms; the fitness examples in the right-hand column are Passy's illustrations.
| Approach | General definition | A personal-training example |
|---|---|---|
| Avoidance | Not entering the activity that carries the hazard; not always possible, and it can mean giving up important advantages | Canceling an outdoor session when conditions are extreme |
| Reduction | Lowering the risk through procedures, training, limits on participants and preventive maintenance | Inspecting equipment, keeping clients in line of sight, spotting, capping class size |
| Transfer | Shifting the risk to another party, mainly by buying insurance | Buying professional liability insurance |
| Retention | Accepting the risk, as with an insurance deductible or a risk too costly or impossible to insure | Absorbing the cost of small, low-likelihood losses |
One program can use several approaches at once, for example inspecting equipment, carrying insurance and absorbing small losses. Passy's rule of thumb for questions is to look at the verb: not doing the activity is avoidance, making it safer is reduction, paying someone else to carry the loss is transfer, and knowingly carrying it yourself is retention. To drill the distinctions, the four risk-management approaches are planned as ACE CPT flashcards alongside the other outline terms.
Safety, environment and emergencies
Task 1's safety items are concrete: line-of-sight, staging, equipment condition, spotting, the exercise environment and emergency exits. ACE's 2025 legal article adds the habits behind them: follow the manufacturer's maintenance schedule, repair or remove damaged equipment immediately, inspect the space for hazards, and check that a space suits the activity before moving a session into it.
Two settings get special attention in the outline and in ACE's article:
- Outdoors. Use waivers written for outdoor sessions, have an emergency response plan, confirm cell phones work at the location, check that your insurance covers off-site activity, and get written permission to use public space. The outline also expects you to modify sessions for altitude, extreme weather, temperature, humidity and air pollution.
- Online. Use waivers and pre-exercise documents that mention online instruction, collect digital informed consent, and plan how you'd respond to an emergency on a client's end of the screen.
For emergencies themselves, the outline lists CPR, AED, first aid, emergency action plans and crisis management, plus documenting what happened. The ACE Code of Ethics commits every certified professional to maintaining current CPR and AED certificates and first-aid knowledge.
Privacy and the laws the outline names
The outline names several laws and bodies without explaining them. What each covers, from its official source:
| Name in the outline | What it covers |
|---|---|
| HIPAA (Health Insurance Portability and Accountability Act) | The Privacy Rule sets standards for the use and disclosure of protected health information. It applies to covered entities (health plans, clearinghouses and health care providers that transmit health information electronically in certain transactions) and their business associates (CDC) |
| FERPA (Family Educational Rights and Privacy Act) | Privacy rules for education records directly related to a student and maintained by an educational agency or institution (U.S. Department of Education) |
| FLSA (Fair Labor Standards Act) | Minimum wage, overtime pay, recordkeeping and youth employment standards (U.S. Department of Labor) |
| OSHA | The Occupational Safety and Health Administration, the federal agency that sets and enforces standards for safe and healthful working conditions (USAGov) |
| CDC, ACSM and NCMW | Sources of guidelines the outline expects you to know about: the Centers for Disease Control and Prevention, the American College of Sports Medicine and the National Council for Mental Wellbeing |
Whether HIPAA governs your work depends on whether you train within or for a covered entity; Passy doesn't give legal advice on that. Confidentiality applies regardless: the Code of Ethics commits you to keeping all client information confidential. ACE's 2025 article suggests storing forms and waivers in a locked cabinet or password-protected files, not leaving paperwork in view, and getting express written consent before sharing a client's information or photos, including before-and-after pictures.
Scope of practice and the ACE Code of Ethics
ACE's 2025 article defines scope of practice as the legal range of services a profession can provide, the settings where it can provide them and the guidelines it must follow. It suggests checking your language and services for words outside a trainer's scope, such as "prescribe," "rehabilitation" or "treatment." The ACE Personal Trainer certification itself, per the Certification and Recertification Handbook, covers training people who are apparently healthy or have medical clearance. The nutrition boundary, from ACE's nutrition scope statement, is laid out in the Domain III guide.
The ACE Code of Ethics has nine principles. In short, an ACE Certified Professional promises to:
- Provide safe and effective instruction
- Treat all clients equally and fairly
- Stay current with health and fitness research and how to apply it
- Keep CPR and AED certificates current and know first aid
- Follow business, employment and intellectual property laws
- Uphold public trust in the health and fitness industry
- Keep all client information confidential
- Refer clients to more qualified health or medical professionals when appropriate
- Set and keep clear professional boundaries
Principle 5 reaches further than people expect. ACE's 2025 article, for example, reminds trainers that playing copyrighted music in sessions, including online, needs a performance license from ASCAP, BMI or SESAC, which clubs often hold as a blanket license.
ACE's Professional Practices and Disciplinary Procedures list the grounds on which ACE may revoke or act on a certification, including exam irregularities, unauthorized use of exam content or ACE materials, misrepresentation or fraud, impairment, negligent or intentional misconduct (such as abuse, disregard for safety or releasing confidential information), certain criminal convictions, and failing to meet certification or recertification requirements. ACE handles alleged violations through a three-tier process of review, hearing and appeals. Renewal also requires agreeing to these documents again, as the ACE CPT recertification guide explains.
Business basics the ACE CPT outline names
Task 3 lists the parts of plans rather than asking you to write one:
| Item | Components the outline lists |
|---|---|
| Business plan | Executive summary, products and services, market analysis, strategy and implementation |
| Marketing plan | Business initiatives, target market, strategy, channels |
| Legal documents and procedures | Waivers, permits, professional insurance |
| Growth and quality | A referral network, technology that serves clients, recruitment and engagement, gathering and acting on client feedback |
ACE's 2025 article adds a question that comes before any plan: are you an employee or an independent contractor? It notes that some facilities blur that line because contractors don't receive training, benefits, withholding or workers' compensation, and that independent contractors then choose a structure, such as a sole proprietorship, partnership or corporation. Business terms like these are short-answer material: planned ACE CPT prep allots 209 questions and 84 flashcards to Domain IV, the smallest share, matching its weight.
Two Passy practice questions on Domain IV
These were written by Passy for practice. They are not ACE exam or practice-test items.
1. Which situation is an act of commission, as ACE defines negligence?
- A. Forgetting to review a new client's health-history form
- B. Not spotting a client during a near-maximal bench press
- C. Having a client with a known back injury perform heavy deadlifts
- D. Failing to report a frayed cable on a gym machine
Keyed answer: C. ACE defines commission as performing an act, or allowing someone to perform one, that causes harm. Directing an injured client into a risky lift is an action. A, B and D are failures to act, which ACE classes as omission.
2. A trainer who runs outdoor boot camps buys professional liability insurance. Which risk-management approach is this?
- A. Avoidance
- B. Transfer
- C. Reduction
- D. Retention
Keyed answer: B. Buying insurance shifts the financial consequences of a loss to another party, which is transfer. Avoidance would mean not running the boot camp, reduction would mean making it safer (for example, inspecting the site), and retention would mean knowingly carrying the cost of a loss yourself.
Your next step for ACE CPT Domain IV
Read the nine Code of Ethics principles and, for each, write one client situation that would test it. Then take the 20 free ACE CPT practice questions and check whether your misses cluster in this domain. Because Domain IV questions often hide inside program-design scenarios, mix Domain IV items with the other three domains in planned ACE CPT practice rather than drilling it alone.
Trust the source
Official sources
Exam policies can change. Use these primary sources for the most current details.
- ACE Personal Trainer Exam Content OutlineAmerican Council on Exercise↗
- Updated Exam Content Outline for ACE Personal Trainer CertificationAmerican Council on Exercise↗
- ACE Code of EthicsAmerican Council on Exercise↗
- Certification and Recertification Handbook (revised September 2026)American Council on Exercise↗
- Legal Responsibility (ACE exam prep blog)American Council on Exercise↗
- Get Your Legal House in Order (Certified, February 2025)American Council on Exercise↗
- ACE Position Statement on Nutrition Scope of Practice for Exercise Professionals and Health CoachesAmerican Council on Exercise↗
- About Us (Risk Management)Valdosta State University↗
- Health Insurance Portability and Accountability Act of 1996 (HIPAA)Centers for Disease Control and Prevention↗
- Wages and the Fair Labor Standards ActU.S. Department of Labor↗
- FERPA | Protecting Student PrivacyU.S. Department of Education↗
- Occupational Safety and Health Administration (OSHA)USAGov↗