I’ve been a privacy counsel for 7+ years now. In my current company there is no security counsel and I get constantly asked about security/cybersecurity issues from a legal perspective but my knowledge in the area is very limited. Any ideas on how/what good resources are out there to help expand my knowledge? Thanks!

like
Posting as :
works at
You are currently posting as works at

Lots of email newsletters out there. In terms of pure legal issues, it isn’t that complicated. What gets harder is substantive cybersecurity itself and being able to assess it in the context of applying the relatively simple legal principles.

like

https://www.isc2.org/certifications/cc

like

i’m on year 4 in a similar position

like

IAPP branching into cybersecurity now — keep checking them for resources as they build it out

like

Y

What issues in particular are you seeing? Like data breaches and stuff?

This is stuff you should share with your security team, but you should definitely be familiar with since privacy and security go hand and hand. Start reading about ISO, NIST, and cyber security newsletters and blog posts on firm sites and blog posts like Lexology.

like

Related Posts

I’m currently a bankruptcy paralegal. Not sure I want to stay in bankruptcy forever. I’ve heard it can be really hard to change practice types and break into a new area of law. Anyone have experience or tips/advice on doing so?

like

Im a third year and my current firm isn't bad and I'm pretty comfortable here. Im satisfied most of the time. There is one firm I've been keeping my eyes on because of its similarities to where I currently am (nice people, similar hours, culture).

Im a bit burned out now and I would love to take a long break. I'm hoping I can take a break (2 months) between the transition but is this a good reason to move though? Would you move in my situation? Im sure there will be a signing bonus.

like

Hi Fishes,
I am new to EY. What is EY GDS promotion policy in general?
Where can we get those details to check the required and expected things to go the next level?
How many levels in Staff? What is the min YOE is required to be a Senior?
How many months/years minimum we need to spend to be eligible for promotion (ex: minimum 1 year a person need to spend on one grade like that)

like

What is the general consensus on online I/O psychology programs? I’m looking to pivot into HC consulting and am strongly considering USC’s online MAPP or Harvard Extension School’s I/O Psychology graduate program.

like

Has anyone moved from tech consulting to strategy in MBB's. Anyone willing to guide on how you made the move?

Is it worth moving to strategy consulting or do strategy business ops in industry?

like

Worth trying to jump from Clearview to MBB for the biopharma exit opps? Or would the exits be similar.

likehelpful

I’ve been reading a lot of FIRE books lately and want somewhere to discuss. What are the biggest takeaways from your FIRE journey/ research?

like

I'm getting a MAcc to career change to forensic accounting. What opportunities are available to me with a data analytics heavy MAcc? I'm also tacking on 2 graduate certificates in Applied Statistics and International Economic Policy? For those in the field, would that be useful or not useful (i.e. waste of time)? I'm interested in investigations but also analytics, financial modeling, and expert witness services. Throw in salary potential for bonus points. I'll be getting my CPA, CFE, and CAMS.

like

How does one go about switching practice groups within the same firm? I was under the impression it’s better to lateral elsewhere but I do really like my firm, just not the work in this practice area. Want to switch from transactional to litigation.

like

I need your honest advice one which options below is better for career projection into leadership roles:
Staying in cybersecurity consulting and moving up the ranks or exiting to product management at a Faang and then no idea what?
Like when you become product manager at a Faang what your career into leadership look like?

like

Fifth year labor and employment associate at Big4 L&E firm (think Littler) and am considering making a move into big law (think Jones Day, Goodwin, etc.) Any thoughts on if it’s worth it this late in my associate career? Also, do those big firms take 6-8 year L&E laterals?

like

£50k TC, 2.6YoE working within the change arm of a bank ——- what do experienced fishes think is a good next move for someone like myself? Might want to move into consulting one day with ultimate aim of MBB but also enjoy technical coding work, particularly in credit risk / counterparty credit risk in banking — could use some fresh perspective ; quite confused atm as interested in many things! Don’t mind staying in change management either TIA - appreciate any advise

like

Looking to get some more certifications under my belt so I can grow my career. What certifications are recommended for becoming a more knowledgeable healthcare consultant, and what certifying body/program would you suggest I do it with? Looking for any/all options that are most desired in today’s market

like

Those who moved from MBB to Strategy& , why did you do it? Pros and cons?

like

I’d to get a job in a small architecture firm or work for a developer to help build up my network. For the past 6 years I’ve taught high school architecture and engineering and done real estate on the side. I have an industrial design degree and tremendous construction and real estate sales knowledge. I also started architecture school but stupidly switched to industrial design. I don’t want to go back to school for architecture. Ultimately, I want to own my own company developing real estate.

like

I am trying to land a role as a human resources business partner and I'm wondering which certification would be the best for me going forward. Phr? Shrm? Thoughts? Thanks!

like

How common are career changes / pivots? Can’t help but feel behind now that I’m considering a change and makes me feel alone. Not sure how to go about making the change (finance to marketing)

like

Dynamic strategy consulting background (6 YOE) looking to shift to sales/BD.

I know how to sell and build relationships/report.

Does that sound interesting to anyone? Hoping to get to work soon.

like

I’ve been told my company is changing my title from Associate Director of BD to Sales Executive. I’m concerned it reads like a title demotion. Is it just semantics? How will this look for my career development? Curious about the standard perception of Sales Executive from a seniority perspective. Where does this land on the sales roles hierarchy? For context, it’s a professional services firm, I’ve been there 3+years, and they gave a Sales Executive title to someone who just started 5mo ago.

like

Is HPE product based company? what kind of work will be there for a data engineer?

How is growth, wlb and job security?

skills : Python, Spark, Sql, AWS, Airflow.

like

More Posts

I am trying to land a role as a human resources business partner and I'm wondering which certification would be the best for me going forward. Phr? Shrm? Thoughts? Thanks!

like

Here is my go-to interview question, "What is the difference between data science and data analytics?"

What questions does everyone else include when interviewing or is the best question you've been asked in an interview?

like

Any good PG for gents near Taramani ascendas IT park?

like

This post for relatives thinking 😂

Post Photo
funnylike

Any reviews of Capgemini Invent? Is the work culture similar to Capgemini or does it actually engage in Management Consulting projects ? Capgemini

like

Hey everyone! Anyone did BCG gamma hackerrank online test?

like

I need to do a case prep. Let me know if anyone is available today or tomorrow? Based on ET

like

London drinks or more than NY !!! Agree?

like

Does Infosys revise the offer letter after accepting it??

Such a Boring session today! 30 mins left. Any drama big movers?

like

Anyone received offer from ZS recently?

like

Hi All,

I am looking for a new opportunity on ITSM domain accross India on an immediate basis. Please let me know in case you can extend any help.


Prompt response is appreciated

First couple times drafting ancillary docs—is it normal to not get everything/feel like I have no idea if I got stuff right. Or is the expectation that the docs be drafted 100% in executable form.

likefunny

Hello Fishes,

Require an immediate help in deciding whether should I join KGS as I am only having 1.6 years of experience. Currently I am working in EY GDS under a tech risk team. The hike that I am getting is of 53% of current fixed Compensation.

like

Anyone happen to be familiar with the 5300 Glencoe Park neighborhood/properties? Like it’s location to DT (job) but also want to make sure it’s good for my soon to be grade school kids.

Hi everyone,
I am a new joiner @ Coforge, joined on Nov 15th and still waiting for project allocation. What is the resource pool/bench policy for a new joiner, can anyone please help on this?

like

Need leads for 2bhk flat for rent in marathalli and Whitefield, can anyone ki dly provide leads please

like

I am getting an offer of 12lpa fixed from EY GDS. YoE 5 years. Cybersecurity domain. My fixed was at 8.7 lpa. How is the offer? Rank is 44.

like
likehelpful

Anyone else cursed with desperately wanting someone to tell you what to do to get better, but knowing that you would never listen?

like

Additional Posts in Privacy Law

Best law firms in NYC for privacy law, especially if you’re a judicial law clerk with no experience but studying for the CIPP/US?

like

Mid/big law privacy associates- how much do you bill a month on average? is your workload predictable?

like

IAPP is such trash. Why does everyone recommend getting the CIPP certs when they mean nothing??

like

Is it normal for a California employer to include a very detailed notice in the employee handbook about employee monitoring practices and the company’s right to search your stuff? Or do I need to look for a new job immediately….. 🚩

like

Can you incorporate SCCs by reference in a DPA?

like

Anyone else dying this week 😅

like

Not sure if this is the right place, but in a privately owned business located in a right to work state, is verbal abuse allowed and would swearing at and putting down an employee in front of a bunch of other employees and in front of customers be deemed verbal abuse? Can owners demand you work a certain amount of hours a week if it’s 100% commission?

like

Any associate privacy roles open in Austin, TX?

like

What industry in Atlanta offers the best prospects (most demand) for privacy law/compliance exits?

like

What’s the attire for the privacy + security forum? Would untucked shirt and ABC pants cut it? (I’m in biglaw, by the way)

Hi all,
Been doing privacy for about a year now in-house. Got my CIPP/US.
Having major imposter syndrome still. I feel like the minute I finally have a grasp, something changes. The law and nuances just seem overwhelming. Maybe it’s just a lack of guidance/uniformity in the US. I’m not sure if I feel this way because it is simply the nature of the work or because I’m just not capable.
😔

likehelpful

Firms hiring in Texas, Iowa or remote? Junior associate with CIPP (US +E), CIPM, and a post-grad fellowship in cybersecurity.

like

What circumstances under the Gramm Leach Bliley Act would trigger reporting to the FTC, if at all?

like

Can anyone share a salary range for a Privacy Manager role in the private sector for someone with a JD and several years of experience?

Planning to take the CIPP and CIPM. Will be doing self-study. What is the “book” everyone refers to for studying? Is it just the “study guide” the IAPP sells? Does anyone know if the study guides and sample questions you can buy on amazon are sufficient to use for passing? Appreciate any and all advice.

like

Hi all! I’m inclined on taking up the CIPM training and certification exam. I’m already a certified Data Protection Officer in the Philippines. I intend on skipping CIPP as it applies to the US and EU.

How difficult was the exam? Can you share your experience studying for the CIPM exam? Is it advisable to skip CIPP?

Many thanks in advance.

like

I feel like a mega nerd saying this but I just got staffed on my first data breach response and I'm having so much fun! 🥸😅

likeuplifting

Is anyone involved in IAPP’s young privacy professionals group? Is there an age cutoff? They keep emailing but I wouldn’t consider myself “young”! Will they stop emailing when I turn 40?

likefunny

How Much Can You Sue an
Employer for Not Paying You?

like

In terms of taking the next step to elevate your career- what items are you heavily focusing on? I have speciality in data governance as well as product counseling, but curious to know what others find most helpful in their practice areas.

likehelpful

New to Fishbowl?

Download the Fishbowl app to
unlock all discussions on Fishbowl.
That was just a preview…
Sign Up to see all discussions
  • Discover what it’s like to work at companies from real professionals
  • Get candid advice from people in your field in a safe space
  • Chat and network with other professionals in your field
Sign up in seconds to unlock all discussions on Fishbowl.

Already a user?
Login here

Share

Embed this post

Copy and paste embed code on your site

Preview

Download the
Fishbowl app

See what’s happening in your industry
from the palm of your hand.

A phone with Fishbowl app

Scan your QR code to download
Fishbowl app on your mobile

Download app

Sign up for free to view this conversation on Fishbowl

By continuing you agree to Terms of Use and Privacy Policy

Already have an account? Log in

Sign up for free to continue using Fishbowl

By continuing you agree to Terms of Use(New) and Privacy Policy(New)
Messaging rates may apply

Already have an account? Log in

For account settings, visit Fishbowl on Desktop Browser or

General

Legal