Privacy Law

JD Hire in Big 4 consulting looking to transition to an in-house or law firm role. Heard it's not an easy transition to leave consulting to go into law, but would appreciate any advice.

Over a happy hour yday a former colleague (now friend) said they’re considering reporting their NY finance client for transactions related privacy violation. They wrapped project last week but are still FTE with … more

To keep up with developments in privacy policy and law, I read The Register, IAPP’s news, and law firm updates (only on specific topics I want to know about, not routinely). Any other resources yall l… more

Anyone have any incident response management tools they use to track incidents and assist with organizing documentation around notifications/reporting decisions? This excel and teams chat life is ki… more

Hi All, looking for some advice. Im trying to pivot more to the legal side of privacy while not loosing the cyber data privacy side. Currently in Consulting (3 years) with several years prior in broad… more

Hating one trust and Big ID. Anyone have a vendor they are using for privacy compliance that they actually like?

I feel like when I bring up privacy reg/law changes that affect our internal ops or services, the other ops and service teams either get really afraid or annoyed when I recommend changes. What am I do… more

Any favorite privacy compliance softwares, particularly for dsrs and ropas?

How are cloud software vendors addressing NIS 2 Directive compliance requirements in their customer contracts, if at all? We have one customer who is trying to impose the 24-hour reporting obligation … more

Do any of you use ai? If so what are the best tools

Good morning,
I am privacy newbie and obtained my CIPP/US recently and would like to look for my next role. Currently, I am not working and I’m in a litigation heavy jurisdiction. What role should I b… more

When is it worth getting CIPP/US? I’m a product counsel in pharma and at my new role am acting as local privacy officer. I’m a healthcare regulatory and transactional attorney by trade - not a privacy… more

I’m a solo counsel at a growth stage tech startup. I know enough about the privacy laws that apply to my company, but really need help with implementation (e.g., data mapping, training, responding to … more

I just passed the CIPP/US exam…now what?? I have 4 YOE in litigation but I would like to transition to a privacy role.

What are your thoughts on AI Governance as a viable and sustainable career path moving forward? Do you thing it is here to stay? Or simply something that is in vogue while AI is in its nascent stage?

This is more of a security question, but thought I would ask here (and please be kind). I joined a cloud software startup as solo counsel. I’ve been asked to review a customer notice about a vulnerabi… more

What does your day to day look like as a privacy attorney in house?

Thoughts on midsize Midwest firm (lit/ID) versus small Midwest firm if trying to breakout into tech/data space.

has anyone seen/included opt out requirements in vendor agreement? for example, we have a vendor that will touch our clients’ sensitive information. if we receive and pass on an opt out request, the v… more

Non-attorney consultant here. Just got my CIPP/US cert. Taking suggestions on next steps into a privacy role.

Just joined a small Pharma company as Product Counsel and am going to be groomed to be the Privacy Officer/Privacy Counsel. I’m a 6th year healthcare regulatory and transactional attorney for referenc… more

soft reminder to get your IAPP credits done 🩷

anyone use drata for vendor and internal compliance? thoughts appreciated

Is the IAPP membership worth it for a new attorney?

Anyone else here in-house at a tech startup? Where does data/privacy compliance fall on your list of priorities?

Has anyone used CookieYes as a basic CMP?

How do I get an interview? Cold applying does nothing

What retention period are companies using for emails?

I need some advice on whether to stay or start looking: 11YOE (IP lit and then in house) - 3 years as director - privacy counsel PE tech. Functionally - global head of privacy and lead AI counsel. See… more

Question for the smaller companies here- What tools do you use for data mapping?

Is the summer associate market bad for privacy lawyers? Not sure what to do at this point.

Does anyone here have any experience with consulting firms which hire Privacy Attorneys for projects and/or permanent roles? If so, which ones do you recommend?

Hello how are others handling do not sell Cora requirements if the company’s website uses google recaptcha

I would like to work abroad doing privacy. I have several CIPP certs but I am licensed as an attorney only in NY. How may one even consider making that jump? Is it better to move first and then try an… more

A lot of companies are adding “AI features” that are powered by out-of-the-box models. Either the customer brings their own key or the company manages the connection. Where the company manages the con… more

For those in private practice that got into privacy from the transactional side: how did you build out your privacy practice with more counseling and regulatory investigation response work?

Do solos do IR? Or is this usually limited to larger firms with a team of attorneys?

I’m a 1L who just passed the CIPP/US. Is breaking into privacy a long shot? Should I just try to get a tech transaction or compliance role?

For relatively straightforward incidents, do carriers and firms ever negotiate project based fees, rather than hourly arrangements?