Chief Privacy Officer Program
The Only Executive Program Aligned with the State Bar of California’s Privacy Law Specialization Standards
Location & Start Date
Online
Self-PacedCourse Launch:
March 16, 2026
Content Access: March 16, 2026-June 12, 2026
Time Commitment: ~20 Hours
Program Type: Self-paced online with some live online sessions and one in-person event
Why Choose UC Berkeley?
For Lawyers:
Designed for attorneys who want to lead at the forefront of privacy and AI, this is the only executive program built directly on the State Bar of California’s Privacy Law Specialization exam standards. It offers a clear, efficient pathway to fulfilling the educational requirement for becoming a Certified Specialist in Privacy Law, while also expanding your ability to advise on data strategy, innovation, and enterprise‑level risk. This isn’t just exam preparation — it’s preparation for the next decade of your career.
For Other Privacy & Data Professionals:
For experienced practitioners ready to step into senior leadership, this program delivers executive‑level training grounded in real business scenarios. You gain the strategic, operational, and cross‑functional skills required for C‑suite readiness, from AI governance to data‑driven decision‑making. It functions as a comprehensive, one‑stop learning platform for mastering the responsibilities of a modern Chief Privacy Officer — enabling you to influence strategy, accelerate innovation, and lead with authority.
The Program Experience
1. The Core Curriculum (Asynchronous)
Master the foundations of privacy law and AI governance through 7 expert-led online modules. Flexible, self-paced learning designed for busy executives.
2. Strategic Dialogue (Live Online)
Engage directly with faculty and peers during interactive live sessions. We move beyond lectures to debate hot topics, real-time regulatory shifts, and case studies.
3. The Berkeley Capstone (In-Person)
Convene on the UC Berkeley campus on June 12, 2026 for a high-impact closing event. Participate in advanced workshops, network with industry leaders, and receive your certificate at our closing ceremony, plus at least 11 MCLE credits toward the Certified Specialist in Privacy Law education requirement.
4. Comprehensive Specialization (Bonus Access)
Gain exclusive access to the Berkeley Center for Law & Technology’s B-CLE platform. You will receive access to the full library of content required to meet the rest of the 60-hour education requirement for the State Bar of California’s Privacy Law Specialization.
Instructor
Jeewon Kim Serrato
Jeewon Kim Serrato is the Lead Instructor for the Berkeley Chief Privacy Officer Program and Senior Fellow with the Berkeley Center for Law & Technology. A recognized authority in consumer protection, emerging technologies, and global data strategy, she brings more than two decades of experience at the intersection of business, law, and policy — advising the U.S. government and Fortune‑scale enterprises on mission‑critical programs, privacy‑by‑design, and the deployment of transformative technologies. Most recently, Jeewon served as Head of the Global Consumer Protection team, Co-Head of the Retail Industry Group, and member of the AI Global Task Force at Pillsbury Winthrop Shaw Pittman LLP.
As a former chief privacy executive for two global corporations — including a world‑leading provider of information‑based analytics and decision tools and a major financial institution — Jeewon has led enterprise data strategy programs, managed over 600 security incidents, and guided brand and asset management for a publicly traded firm with $3.5 trillion in assets. Her work spans advising global technology platforms, driving value‑enhancing digital initiatives through mobile, web, and AR/VR apps, and leveraging AI‑powered solutions to unlock growth and innovation.
In 2022, Jeewon was appointed by the California Board of Legal Specialization to chair the consulting group to establish the Privacy Law Specialization, the state’s first legal specialization in privacy, cybersecurity, and AI. She is recognized by Legal 500 as a Recommended Lawyer, Media, Technology and Telecoms: Cyber Law, Cybersecurity Docket’s “Incident Response 30,” and the National Law Journal as a Cybersecurity Trailblazer.
Chief Privacy Officer Program Course Modules
Below is a list of the course modules. For a detailed overview of the learning outcomes, format, course design, and modules, please request the Chief Privacy Officer Program course syllabus.
Module 1
Professional Responsibility
This module explores the ethical and professional obligations of privacy specialists under the ABA Model Rules and California Rules of Professional Conduct. Participants will examine duties of competence, confidentiality, and loyalty, as well as emerging ethical challenges posed by AI and new technologies. Practical strategies for safeguarding client data and managing conflicts will be emphasized, as well as data practices such as data mapping and minimization.
Key Topics:
- ABA Model Rules and California Rules of Professional Conduct
- Ethical duties in privacy and AI contexts
- Conflicts, confidentiality, and regulatory compliance
Module 2
Principles of Privacy and AI
This module provides a deep dive into the foundational principles of privacy law and AI governance. It covers notice, transparency, fairness, and accountability, along with frameworks such as the EU AI Act and U.S. regulatory approaches. Participants will learn how to mitigate algorithmic bias and design ethical AI systems aligned with global standards.
Key Topics:
- Notice, transparency, fairness, and accountability
- AI governance under the EU AI Act and U.S. frameworks
- Ethical design and algorithmic bias mitigation
Module 3
Data Collection
This module addresses legal and practical considerations in collecting personal data. Topics include different notice-at-collection requirements, including CCPA and GDPR, lawful bases for processing, and special protections for children’s data. Participants will also explore evolving consent standards, third-party data sourcing, new and emerging data broker laws, and enforcement trends impacting data collection practices.
Key Topics:
- Notice at collection (CCPA, GDPR)
- Data minimization and lawful basis for processing
- Special rules for children’s data (COPPA, UK’s Appropriate Design Code)
Module 4
Use of Personal Information
This module examines how organizations use personal information within legal and ethical boundaries. It covers controller versus processor roles, purpose limitation, and opt-out rights, as well as restrictions on automated decision-making and profiling. Participants will gain insights into balancing legitimate business purposes with privacy protections and explore the complex interconnections between privacy rights and freedom of speech.
Key Topics:
- Controller vs. processor roles
- Purpose limitation, right to correct, and opt-out rights
- Automated decision-making and profiling restrictions
Module 5
Data Security
This module focuses on safeguarding sensitive data and ensuring compliance with security regulations such as HIPAA, GLBA, and state breach notification laws. Participants will learn best practices for encryption, access control, incident response,
and cybersecurity governance, including strategies for preventing and managing data breaches.
Key Topics:
- Sensitive data handling (HIPAA, GLBA, DOJ Cybersecurity Program)
- Breach notification laws and incident response
- Critical infrastructure and government data protections
Module 6
Data Sharing and Data Brokerage
This module explores the complex landscape of data sharing and monetization. It addresses sale and share definitions under new U.S. state laws, such as CCPA/CPRA, opt-out mechanisms, and universal preference signals, as well as compliance with data broker laws. Participants will also examine cross-border data transfers and obligations when sharing data with government agencies or third parties, including the new DOJ Data Security Program with prohibitions on data sharing with Countries of Concern.
Key Topics:
- Sale/share definitions under CCPA and CPRA
- Opt-out mechanisms and universal preference signals
- Data broker laws in Vermont and California
- DOJ Data Security Program
Module 7
Technologies
This module surveys emerging technologies and their privacy implications, including AI, biometrics, blockchain, and decentralized systems. Participants will analyze legal frameworks governing these technologies, platform liability issues, and strategies for mitigating risks associated with innovation. The discussion will include practical considerations for privacy compliance in rapidly evolving tech environments.
Key Topics:
- Privacy challenges in decentralized systems
- Biometric and genetic privacy laws (BIPA, GINA)
- AI model governance and risk tiering under EU AI Act
- Specific legal issues relating to platform liability
- Unfair and Deceptive Practices Relating to Technology GTM
Tuition & Discounts
Early Registration
Save $1,200 off general tuition through March 4
Available until 11:59pm PT on March 4, 2026
$6,800
Save 15%
General Tuition
Starts March 5, 2026
$8,000
UC Berkeley Alumni and Government, Nonprofit, and University Employees*
Also applies to past participants of paid UC Berkeley Law Executive Education courses.
$6,400
Save 20%
What’s Included:
- 7 Online Modules & 3 Live Sessions
- Admission to the June 12, 2026 In-Person Capstone Event (meals included)
- Certificate of Completion from UC Berkeley Law Executive Education
- 11 hours MCLE
- 12 Months of access to the B-CLE Platform (60+ hours of CLE content)
*For all special rates, please email [email protected] for instructions to access your tuition category. All special rates are discounted off of the general tuition and cannot be combined.
Sallie Mae Financing
If you are interested in financing this course, Sallie Mae provides competitive education loan programs for credit-qualified borrowers. For more information and to apply, visit the Sallie Mae website. If you decide to pursue such financing, please submit your application to Sallie first and then contact us at [email protected]. We will provide additional instructions on completing your registration.
Professional Development Sponsorship
If your employer provides professional development opportunities and funding, we highly recommend asking them to subsidize the cost of tuition for the course. This certificate program is an excellent professional development and networking opportunity, and your employer may be willing to cover some, or all, of the costs. You are welcome to customize this Word doc. template for your purposes.
Certificates & MCLE
Certificate Type
Certificate of Completion
Participants who complete all required course elements will receive a certificate of completion from Berkeley Law Executive Education.
MCLE
11 Hours
This program has been approved by the California State Bar to offer at least 11 credit hours of MCLE (exact amount to be confirmed after the course launches). Attorneys from other states will need to contact their local bar to verify their own certification requirements.
Expert Contributors
Serge Egelman
Founder at AppCensus, Inc. / Researcher at UC Berkeley & ICSI
Defne Ezgi
Political Science Instructor at Columbia College
Chris Hoofnagle
Professor of Law in Residence, UC Berkeley Law & Faculty Director, Berkeley Center for Law & Technology
Deirdre Kathleen Mulligan
Faculty Director at Berkeley Center for Law & Technology
Paul Schwartz
Jefferson E. Peyser Professor of Law at University of California, Berkeley School of Law
Jennifer Urban
Chair, California Privacy Protection Agency; Director of Policy Initiatives, Samuelson Law, Technology & Public Policy Clinic at Berkeley Law
Program Partners
Accessibility
For disability accommodation requests and information, please contact us at [email protected]. Please attempt to make your service request with as much advance notice as possible.
