How to become a privacy and cybersecurity lawyer: the work and the path in

The subject matter defines the job, not a separate license.

In broad terms, privacy work deals with how organizations collect, use, share and protect personal information, and cybersecurity work with keeping systems — and the data they hold — secure against incidents.

These are working descriptions, not measured categories — so read the posting rather than the title: nothing in this page's sources says how a given employer uses the two labels.

Be precise about what the sources behind this page can and cannot show: the research documents the profession's numbers — employer mix, outlook, pay — and the ethics architecture around technology and data, but no primary source read for this page measures privacy practice itself, duty by duty.

What the documented material does show is an ABA ethics opinion that ties existing duties to lawyers' use of technology — Opinion 512's duty list and its e-discovery example.

The clearest documented anchor is ABA Formal Opinion 512 (July 29, 2024), which addresses lawyers' use of generative AI and ties it to the duties of competence, confidentiality, client communication, supervision, meritorious claims, candor to the tribunal and reasonable fees.

Confidentiality sits in that list.

The opinion also names technology-assisted review in e-discovery as a well-known AI use, sorting documents as responsive or non-responsive and separating privileged ones, and it says managerial lawyers must set clear firm policies on permissible generative-AI use, with supervisors making sure lawyers and staff comply and are trained.

Opinion 512 interprets the existing ABA Model Rules — it creates no new rules, and an ABA ethics opinion binds no state; what governs a lawyer's practice is the version of the rules their own state has adopted.

The cautionary case the research records predates the opinion: Mata v.

Avianca (S.D.N.Y., No. 22-cv-1461, June 22, 2023), where the court sanctioned two lawyers and their firm for filing non-existent opinions with fake quotes and citations generated by ChatGPT, imposing a $5,000 penalty jointly and severally.

For a field built around technology risk, the case is a compressed lesson: the lawyers continued to stand by the fake opinions after judicial orders called their existence into question.

Privacy and data practice is one of the named fields ("privacy and data") in our types of lawyers guide, and it sits inside the wider attorney careers landscape — the same license baseline, applied to a different body of rules and risk.

For the tools side of that landscape, see our guide to the AI tools lawyers use at work.

Start with the honest caveat: BLS counts employers for lawyers as a whole, not by practice area.

In 2025 the largest employers of lawyers were legal services (52%), self-employed lawyers (11%), local government (8%), state government (7%) and federal government (5%).

BLS publishes no privacy-only version of that table, so nothing in this page's sources can tell you which employer type dominates the specialty — read the percentages as the profession's employer map.

Legal services is the largest block in that table, and large firms lead the graduate market: firms of more than 500 lawyers are the single largest employer of new law graduates, taking more than one in five employed Class of 2025 graduates — and counting 251–500-lawyer firms, about one in four employed graduates started in a large firm.

Across all Class of 2025 law-firm jobs, firms of 501+ lawyers accounted for 33.2% and firms of 1–10 lawyers for 26.4%: a big-firm end and a long small-firm tail.

Government is the employer the sources behind this page document in the most mechanical detail: federal agency attorney jobs sit in the GS-0905 General Attorney series — trial work, legal advice to an agency, drafting regulations, contracts and legislative comments — and are filled outside the competitive-service examining process as Schedule A excepted-service appointments.

The Justice Department employs the most federal general attorneys — nearly 13,000 — per the ABA's 2024 Profile, and BLS's described titles for government lawyers include prosecutor, public defender and general counsel.

In-house legal departments are the other destination the data describes.

Among Class of 2024 graduates in business-sector jobs, in-house lawyer was the most common job type at 22.6% of business jobs — though only 32.6% of those business-sector jobs required bar admission, and 47.0% were JD Advantage roles where the degree matters without admission being required.

Corporate "privacy" postings can therefore be lawyer jobs or JD-advantage jobs; check which one a position actually is.

Nonprofit and NGO work is the piece this data covers least directly: NALP's public-interest category took 9.0% of Class of 2025 jobs, and public service overall — government, public interest and judicial clerkships — accounted for 31.0% (government 12.0%, judicial clerkships 10.0%).

The sources behind this page don't define which employers NALP counts in its public-interest category, so read the 9.0% as the profession-wide public-interest share rather than a nonprofit-specific one.

First, the license: the baseline is the lawyer baseline.

BLS lists the typical entry-level education for lawyers as a doctoral or professional degree, and its summary is that lawyers typically need a law degree and a state license, which usually requires passing a bar examination.

No separately named privacy credential appears in the licensing requirements the sources behind this page describe — the specialty is built on top of the standard license, not beside it.

The comparison BLS itself draws is patent law: BLS notes patent lawyers typically need a science or engineering background and must pass a USPTO-administered exam.

BLS's lawyer profile draws no equivalent link for privacy or cybersecurity practice, and no source read for this page quantifies how much technical education privacy employers want — read the postings for the employers you actually want rather than any general claim about technical backgrounds.

What is documented is what ABA ethics guidance — an interpretation of the Model Rules, not a binding state rule — says about technology fluency.

ABA Formal Opinion 512 says lawyers need not become AI experts but must reasonably understand the capabilities and limitations of the generative AI tools they use, and it lists the work such tools already touch: legal research, contract review, due diligence, document review, regulatory compliance and drafting.

That documented list — contracts, compliance, review workflows — is the closest sourced sketch of where technology knowledge gets used in practice.

For the parts of a candidacy selectors actually document, DOJ lists its Honors Program selection criteria as commitment to government service, academics, leadership, journal/moot court/mock trial, clinics, past employment and relevant extracurriculars.

Those levers are where a privacy interest gets demonstrated rather than asserted.

And if you have not committed to a field yet, our choosing a practice area guide walks that decision on its own terms.

The entry levers the sources document are general rather than specialty-specific, because no privacy-specific entry data exists in the research behind this page.

BLS notes a successful summer job or internship during law school may result in an employment offer after graduation, and that judicial clerkships are typically 1- or 2-year terms some graduates take before practicing.

Private practice is the statistically biggest route: 60.9% of employed Class of 2025 graduates took private-practice jobs, and firms of more than 500 lawyers were the single largest employer of new graduates — the employer counts in the previous section describe all graduates, not privacy hires specifically.

For federal agencies, the documented entry program is the Department of Justice's Attorney General's Honors Program — DOJ's entry-level attorney recruitment program, running since 1953.

Eligibility is narrow: graduating law students and recent graduates who entered a judicial clerkship, graduate law program or qualifying legal fellowship within 9 months of graduation.

The window is short — for the 2026–2027 cycle, the application opened Aug 28, 2026 and closed Sept 8, 2026, submitted through DOJ's CORA system.

After the deadline, DOJ's published timeline runs interview invitations in early October, interviews from late October to mid-November, and offers from November on.

Federal "law clerk trainee" appointments also exist for law graduates pending bar admission and may not exceed 14 months.

Calibrate expectations along two axes.

Federal hiring of new graduates fell sharply: NALP measured a 37.0% drop in graduates hired by the federal government excluding judicial clerkships, from nearly 1,100 in the Class of 2024 to about 690 in the Class of 2025 — so treat federal openings as one competitive path, not a plan with slack in it.

And geography compounds: 65.6% of employed Class of 2025 graduates worked in the same state where they attended law school, so where you study shapes which state's employers are realistically in reach.

For lawyers already in practice, the route in runs through the record you can show: matters touching information handling, security incidents or technology contracts are subject-matter evidence, and the duties in this page's first section — competence, confidentiality, supervision — are duties Opinion 512 ties to any lawyer's use of generative AI, technology-focused practice included, with each state's adopted rules governing.

No source read for this page measures how often laterals move in from adjacent fields, so treat it as a positioning problem: build the record, then go where the postings are.

BLS publishes no count of privacy lawyers: it tracks the lawyer occupation as a whole and does not break employment out by practice area.

Any precise "number of privacy lawyers" or "privacy law growth rate" figure you encounter therefore came from someone other than BLS — treat it accordingly.

What the primary sources do measure is the profession.

Lawyers held about 863,700 jobs in 2025.

BLS projects 5% employment growth from 2025 to 2035, faster than the average for all occupations, with about 28,700 openings a year on average over that span, many from replacing workers who retire or change occupations.

BLS also expects some routine legal work to be automated but does not expect that to reduce overall demand for lawyers.

For the profession-wide outlook in depth, see our attorney job outlook article — this page stays on what the specialty can and cannot claim from the same data.

The entry-level market the Class of 2025 graduated into was strong by NALP's measures: 92.8% of graduates were employed about ten months after graduation, and 84.6% held jobs requiring or anticipating bar admission — the highest share since NALP's current job classifications began in 2001.

BLS doesn't track pay for the specialty either.

Its median annual wage for lawyers was $159,670 in May 2025 (SOC 23-1011) — a figure that excludes self-employed lawyers and owners and partners of unincorporated businesses, so it describes neither solo nor partner income.

By sector, BLS's May 2025 medians were $178,380 in federal government, $157,870 in legal services, $131,390 in local government and $115,330 in state government.

All of these describe lawyers as an occupation, not privacy specialists.

Starting pay for new graduates follows different numbers — the FAQ below keeps the two series apart.

Start wide: browse attorney jobs on LawFirmHires to see current openings across employers, and read each posting against the employer types in this page's second section — a privacy seat in an agency, a firm's data practice and in-house counsel work are different jobs sharing a vocabulary.

Search more than one title, too — nothing in this page's sources says which label a given employer uses for the work.

For the general path this page specializes — college through law school, the bar and a first legal job, in order — see how to become a lawyer.

Career information, not legal advice. The licensing summary here is BLS's occupation-level description; confirm current bar admission requirements with the bar admission authority in your state.