Privacy Law Entry-Level and Junior Job Opportunities
Privacy law is a wonderful career with abundant opportunities. The field is growing tremendously. But starting out can be challenging. Here is some information about where to look to start a career in privacy law – organizations with entry-level and junior job opportunities in the field.
If you’re interested, please note that I also maintain the following relevant pages:
- How to Enter the Privacy Profession
- Privacy Law Internships for Law Students
- Privacy Law Fellowships for Recent Law School Graduates
Advice on Entering the Privacy Profession
In my post, How to Enter the Privacy Profession, I offer advice from others plus offer some of my own advice on entering the privacy profession.
You might consider joining a relevant Bar Association, such as the ABA Section of Science and Technology or the ABA Antitrust Division’s Privacy and Information Security Committee. Click here for Law Student Member Resources and Opportunities.
The Internet Law & Policy Foundry is a collaborative group of early-career Internet law and policy professionals passionate about technology. The group created a platform for policy and law professionals with a genuine, demonstrated passion for the Internet and technology. Its Job Board lists relevant positions, internships, and fellowships in Internet, technology, and privacy law, as well as in related fields.
You might consider obtaining a certification from the International Association of Privacy Professionals. Their main certification is called a Certified Information Privacy Professional (CIPP) and is increasingly a sought-after credential by employers.
Privacy Law Fellowships
I maintain the following page about privacy law fellowship opportunities: A List of Privacy Law Fellowships.
Professor Solove’s Information Privacy Law Alumni LinkedIn Group
I have a LinkedIn group for alumni of my information privacy law class that I use to share information about job opportunities I learn about as well as keep in touch with students and share some of my recent work with them. This is a non-public group and I only let current and former students join. Although the group is called “alumni,” I welcome current students too. I only accept current and former students to the group.
General Recurring Job Opportunities
Where the Entry-Level and Junior Privacy Law Jobs Are
The following organizations often have entry-level job opportunities or fellowships. These places can be a great way to start your career:
Big Law Job Opportunities
Many law firms now have privacy law practice groups. These practice groups advise companies on complying with various privacy laws around the world. Some of the groups handle regulatory investigations such as FTC or HHS investigations. Some groups handle data breach response. Although many practices are primarily about offering compliance advice, there are practice groups that are involved in data breach litigation as well as TCPA litigation. A few firms handle a significant amount of work involving ECPA.
There are several sites that rank law firms in the field. I find such rankings somewhat dubious, but these lists are a good way to identify many of the law firms with practices in the field.
US News — of course, US News must rank everything in the universe
Boutique Law Firm Job Opportunities
There are several smaller boutique firms that focus heavily or exclusively on privacy and cybersecurity — InfoLawGroup and ZwillGen are two of the most prominent ones.
ZwillGen, a boutique firm focusing on privacy law and ECPA work, has an annual program where it hires fellows who work for a year. Fellows have gone on to great positions afterwards, making this position a terrific stepping stone. Several former students of mine have been ZwillGen fellows.
Consulting and Auditing Firm Job Opportunities
The consulting and auditing firms are willing to hire entry-level and relatively junior attorneys. The junior-level work consists of doing audits, risk assessments, or other similar projects. This can be a good way to learn about the issues and risks that big companies are facing.
PwC’s Cybersecurity and Privacy practice helps organizations protect against threats, propel transformation, and pursue growth. The practice has a long history of helping organizations strategically assess, design, deploy, and improve cybersecurity programs. Click here for related job opportunities.
Deloitte provides audit and assurance, consulting, risk and financial advisory, risk management, tax, and related services to clients. In the U.S., Deloitte LLP provides these services to many of the world’s most admired brands, including more than 85 percent of the Fortune 500 and more than 6,000 private and middle market companies. Click here for related job and internship opportunities.
KPMG is a professional service company with three categories of services: financial audit, tax, and advisory. In an advisory capacity, KPMG works with clients on a range of cybersecurity services, including privacy, data governance, and cyber defense and response. The company offers internships and jobs in the field.
Booz Allen Hamilton (BAH)
Booz Allen Hamilton works in consulting, analytics, digital solutions, engineering, and cyber. It works with industries ranging from defense to health to energy to international development. Click here for related job opportunities.
Non-Profit, NGOs, and Advocacy Organization Job Opportunities
FPF describes itself as follows: “The Future of Privacy Forum is a nonprofit organization that serves as a catalyst for privacy leadership and scholarship, advancing principled data practices in support of emerging technologies.” FPF has the Elise Berkower Memorial Fellowship and Christopher Wolf Diversity Law Fellowship for recent grads. FPF is a great career launching pad for privacy because they are very well connected to companies in many industries and are dealing with many cutting-edge issues.
CDT is a non-profit that describes itself as follows: “[W]e work to preserve the user-controlled nature of the internet and champion freedom of expression. We support laws, corporate policies, and technology tools that protect the privacy of internet users, and advocate for stronger legal controls on government surveillance.” CDT tends to take moderate balanced positions on privacy issues, especially consumer privacy issues. Its positions on government surveillance are more strongly on the libertarian side. From time to time, job positions open up.
Public Citizen is a non-profit that describes itself as follows: “Public Citizen is a nonprofit consumer advocacy organization that champions the public interest – your interests – in the halls of power. Since our founding in 1971, we have defended democracy, resisted corporate power and worked to ensure that government works for the people – not for big corporations.” Their platform isn’t primarily focused on privacy. Public Citizen handles a wide array of issues affecting democracy, and some of these involve law and technology with privacy implications.
Public Knowledge is a non-profit that describes itself as follows: “Public Knowledge promotes freedom of expression, an open internet, and access to affordable communications tools and creative works. We work to shape policy on behalf of the public interest.” Public Knowledge focuses on a handful of issues, many relating to free speech. Some issues involve privacy, especially their work on broadband privacy.
The ACLU has a number of career opportunities. They focus on a wide array of issues, including a number of privacy issues such as anonymous speech and protection from government surveillance.
EFF describes itself as follows: “The Electronic Frontier Foundation is the leading nonprofit organization defending civil liberties in the digital world.” EFF is located in San Francisco, CA. EFF does advocacy work that includes litigating cases. I am on their advisory board.
The Open Technology Institute is the technology program of the New America Foundation. OTI formulates policy and regulatory reforms to support open architectures and open-source innovations and facilitates the development and implementation of open technologies and communications networks. OTI has several fellowships related to privacy and cybersecurity,
Self-Regulatory Organization Job Opportunities
There are a number of associations that promulgate and enforce self-regulatory codes.
NAI describes itself as follows: “NAI is a non-profit organization that is the leading self-regulatory association dedicated to responsible data collection and its use for digital advertising.” NAI has hired many GW Law students as interns, and it has hired quite a number of my students for permanent positions. Students who have worked or interned there have reported very positive experiences.
Private-Sector Companies – In-House Job Opportunities
Many private sector companies are reluctant to hire entry-level or very junior attorneys for in-house positions. But there are a few companies that do. So it is useful to look at companies but be prepared for a significant amount of rejection as many tend to want to hire more experienced lawyers.
Facebook has a large privacy team that faces challenging and interesting issues. Facebook is often looking to hire.
Academic Institution Job Opportunities
The Berkman Klein Center at Harvard offers fellowships for grads. A few former students have done fellowships here and have found the experience to be quite worthwhile.
Industry or Professional Association Job Opportunities
Many industries and professions have associations. Some associations are increasingly dealing with privacy issues and might be interested in hiring an attorney to assist and advise on such issues.
Each year, IAPP hires Westin Fellows to work at the IAPP’s headquarters in New Hampshire. Several students have done this fellowship, and they have launched into great job opportunities thereafter. This fellowship is thus a great stepping stone.
The Computer and Communications Industry Association (CCIA) is an international not-for-profit membership organization dedicated to innovation and enhancing society’s access to information and communications. CCIA promotes open markets, open systems, open networks and full, fair and open competition in the computer, telecommunications and Internet industries. It offers legal internship and job opportunities related to privacy, security, and telecommunications.
Government Job Opportunities
There are many government agencies at the federal and state levels that are dealing with privacy and cybersecurity issues. Broadly, there are two types of privacy/security lawyers who work at these agencies: (1) outward-facing regulators – focus on enforcement of laws and regulations; (2) inward-facing agency compliance officials – focus on doing work internally to make sure that agencies themselves are complying with privacy and security law.
Government agencies and departments will hire entry-level attorneys. Find government job listings at https://www.usajobs.gov/.
The DOJ Office of Information Policy is responsible for developing government-wide policy guidance on all aspects of FOIA administration. The OIP also provides legal counsel and training to agency personnel, and manages agency compliance with FOIA. The OIP hires attorneys to serve as attorney-advisors, who adjudicate appeals under the FOIA or Privacy Act of 1974, provide individualized guidance to agencies on questions relating to the application of the FOIA, and handle the defense of certain FOIA matters in litigation.
NTIA is the Executive Branch agency that is principally responsible for advising the President on telecommunications and information policy issues. For job listings at the agency, check USAjobs.gov.
The National Institute of Standards and Technology (NIST) is a physical sciences laboratory, and a non-regulatory agency of the United States Department of Commerce. From the smart electric power grid and electronic health records to atomic clocks, advanced nanomaterials, and computer chips, innumerable products and services rely in some way on technology, measurement, and standards provided by the agency. NIST offers a variety of internships and jobs.
The FTC’s Bureau of Consumer Protection stops unfair, deceptive and fraudulent business practices, including inadequate privacy and data security policies or practices. The Bureau collects complaints, conducts investigations, files suits, and develops rules to maintain a fair marketplace. The Bureau offers both a Summer Law Clerk Program and entry-level careers.
The New Jersey State Attorney General Honors Program offers recent law school graduates and newly admitted lawyers the opportunity to begin their legal careers in public service. The two-year program allows participants to work in one of six issue areas: civil rights; consumer financial protection; data privacy & cybersecurity; environment; gun safety & gun violence; and public integrity. Click here to apply.