Related Posts
Hi Fishes, Please help me to choose better organization
1. Globant - Designation (Semi Senior Engineer)
2. Brillio - Designation (Lead Engineer )
Both are offering me 21 - 23 LPA fixed
YOE : 4.7 Years Skill Set : ReactJs
I Have joining on Monday, Please help me to choose . I am looking for WLB, Job security, growth & work culture
Globant Globant India Pvt. Ltd. Brillio Accenture NTT DATA
More Posts
Might be guilty of this time to time

Anyone in Austria?
Additional Posts in Privacy Law
Anyone take the CIPM recently? How was it?
Any associate privacy roles open in Austin, TX?
Anyone else dying this week 😅
New to Fishbowl?
unlock all discussions on Fishbowl.




Yes, there are non-lawyer privacy professionals, but much of the most interesting and high paying work still goes to lawyers.
The high-end (and, to a large extent, the low-end) of the profession is dominated by lawyers, largely with corporate/big law-style backgrounds. Unlike infosec, the profession itself exists almost entirely because of the legal requirements and the legal risk associated with noncompliance. The nitty gritty of privacy work flows largely from the legal requirements, unlike infosec which is not as clearly and substantively tied to express provisions of law. Naturally, it tends to be large corporations that have the most at risk when it comes to privacy compliance, so the work tends to go not just to lawyers, but big corporate lawyers.
Now, there is absolutely still room for non-lawyers in compliance work, and that space will likely continue to grow over time. And as acceptance of non-lawyers grows, so will potential upward mobility. Indeed, there are already highly capable and respected privacy professionals who are not lawyers.
Yes you can become a CPO, but a lot of top CPOs are lawyers in practice. Pick a handful of your favorite companies and look up their CPOs on LinkedIn. Should give you an insight into their career trajectory. Note that CPO career trajectory is never typical—vast majority of lawyer and nonlawyer privacy pros alike never make it.
Yes you can. But as A1 states, the privacy world has been flooded with attorneys trying to find a new practice area. If you ever go to large privacy conferences like the ones hosted by IAPP, they are predominantly attended by attorneys.
There are many areas of privacy where it makes sense for companies to use non-attorney privacy resources, specifically in operationalizing the interpretations of the regulation for the company.
Great write up C1
Yes. I'm a successful nonlawyer in the privacy field.
Privacy is emerging; subject areas are still forming. I'm moving into the operations side of privacy engineering.
There are 180k USD jobs out here for cookie compliance.
Get free OneTrust certifications. Shortages are everywhere in privacy.
Thank you, will take a look around.
For reference, CPOs of the following:
Microsoft - Julie Brill, lawyer
Meta - Erin Egan, lawyer
Netflix - Mary Pothos, lawyer
Alphabet - Keith Enright, lawyer
Uber - Ruby Zefo, lawyer