Privacy and cybersecurity are growing legal areas. What does a typical counseling practice look like? And how can you prepare for it?
More on Cynthia Cole & Nick Palmieri.
SPEAKERS
Nick Palmieri, Wayne Stacy, Cynthia Cole
Wayne Stacy 00:00
Welcome, everyone to Berkeley Center for Law and Technology's Career podcast. This is the Executive Director of BCLT Wayne Stacey. And with us today, we have Cynthia Cole and Nick Palmieri, from the law firm of Baker Botts, two of the experts in the Northern District of California on privacy and cybersecurity law. Here today to tell us a little bit about the practice of privacy and cybersecurity law and what somebody could expect if they enter this field. So Cynthia, Nick, thank you for joining us today. So the the initial question for this is, you hear people talk about privacy and cybersecurity, like, they're one thing, that the term always gets thrown around, you go to law firm websites, they have a privacy and cybersecurity practice. The question I have is, are they the same? Or are they two different practices?
Cynthia Cole 01:01
So, I mean, I think it's a good question. It's a good question. And I would say that one of being an expert in one does not necessarily make you an expert in the other two, right. And so those are questions that this is more for a client, but even for, you know, what an A young attorney looking to kind of specialize in either, it's important to sort of understand that there are some, you know, particular questions and things to kind of understand in about the practice itself, that the firm has, right, if you're looking to sort of lean one way or the other, they are different, but they are converging. And I guess I'll maybe start with the differences, which are just roughly, you know, security is more focused on the kind of infosec network infrastructure issues, right patching and updates and encryption and, and those sort of particularities and then privacy is an area that really didn't, frankly, exist in the US. Except as an, you know, as accepted sort of, on the federal, you know, FTC landscape, right. But it didn't really exist a few years ago, until especially not consumer privacy, the way we talk about it today. And so now, what we're seeing is that with GDPR, from the California, you know, the ccpa, the cpra, Virginia, Colorado, and the focus on the focus on privacy and consumer privacy, and then within those statutes, now, we are seeing security mandates in those statutes. Right. And so a lot of that is really what's driving the obligation, the obligation from a privacy perspective, to have the right cyber security protections. Right. And so that's really kind of how that is converging.
Wayne Stacy 03:03
Well, Nick, for it for a new lawyer entering the field, do they need to think about specializing in one or the other is they they start their career and then later on learn both?
Nick Palmieri 03:16
So from from my experience it, you know, he started out doing, doing quite a bit of both, like Cynthia said, cybersecurity is more focused on the infrastructure side of things. So there's, there's less of a, you know, legal aspect to it, you know, the legal department at an in-house company, or at, you know, law firms themselves will not be in the, in the deep of a cyber incident, you know, we're not behind the scenes, shutting down servers or anything like that. From the cybersecurity point of view, we're really responsible, responsible for, you know, the response of what happens, you know, who are you reporting things to do, we have to