Zachary Kilhoffer and Devyn Wilder, University of Illinois at Urbana–Champaign
Data privacy stands as a pressing and critical concern for numerous organizations. The burgeoning field of privacy engineering has emerged to address this demand. Although there exists no universally agreed-upon definition of the roles or educational requirements for privacy engineers (PE), many organizations enlist professionals to fulfill this pivotal function. In our quest to understand the daily practices and challenges faced by PE, we conducted interviews with 14 individuals currently in this role.
Initial findings underscore the immense diversity encompassed by the responsibilities, tasks, and competencies inherent in privacy engineering. Our research spotlights two key thematic areas: first, the varied ways in which PE employ privacy and security standards and controls; and second, the intricate and multifaceted relationships PE cultivate within their organizations. Notably, our investigations reveal that a considerable number of PE primarily concentrate on ensuring compliance with legal frameworks, such as GDPR and COPPA, rather than actively developing or implementing ambitious privacy policies. Furthermore, results indicate that privacy engineering, while still lacking a precise occupational definition, is undeniably a growing career path deserving of increased standardization. We believe that our findings provide insights into the myriad ways privacy engineering can be expanded and refined.
Zachary Kilhoffer, University of Illinois at Urbana–Champaign
![](https://www.usenix.org/sites/default/files/styles/speaker_photo/public/kilhoffer_zachary_200x230.jpg?itok=sISDYSzg)
Zachary Kilhoffer is a tech policy researcher and PhD candidate at the University of Illinois at Urbana-Champaign. With his background in governance and technical ML studies, Kilhoffer aims to standardize development and deployment procedures to make AI systems more fair, accountable, transparent, and ethical. In his free time, Kilhoffer likes woodworking, sci-fi, and spending time with his cats Theodore Roosevelt (Teddy) and Franklin Delano Roosevelt (Frankie).
Devyn Wilder, University of Illinois at Urbana–Champaign
![](https://www.usenix.org/sites/default/files/styles/speaker_photo/public/wilder_devyn_200x230.jpg?itok=i5XKYaZu)
Dev Wilder is a PhD student in Information Science at the University of Illinois Urbana-Champaign. Her areas of focus are information policy, medical misinformation, community information sharing, and various topics surrounding privacy. When she's not doing research, Wilder enjoys knitting, ice skating, and baking bread.
![](https://www.usenix.org/sites/all/modules/usenix/usenix_files/images/usenix-locked.png)
author = {Zachary Kilhoffer and Devyn Wilder},
title = {Cache-22: Doing Privacy Engineering with Privacy Standards},
year = {2024},
address = {Santa Clara, CA},
publisher = {USENIX Association},
month = jun
}