Charting Your Course in Tech Law:

A Practical Toolkit for Women Law Students

by Amanda Barraza

HOW TO USE THIS TOOLKIT

This guide is for women at any law school, no technical background required.

WHERE YOU ARE

  • Use the 1L, 2L, or 3L checklist that matches your year
  • Each section builds on the last — but you can start anywhere
  • Not in law school yet? Start with the Career Paths section

WHAT YOU WANT

  • Interested in IP? Start there first
  • Curious about AI or privacy? Do your own deep-dive
  • Use the Resources section to find your community now

HOW TO ENGAGE

  • Return to this guide each semester
  • Share it with your Women in Law student org
  • Use the mentor questions as conversation starters

THE TECH LAW LANDSCAPE

Four main areas. Endless Opportunities.

Intellectual Property

  • Patents, trademarks, copyright & trade secrets
  • Protects tech inventions, software, and brands
  • Practice in BigLaw, boutiques, in-house at tech giants
  • Patent prosecution often rewards STEM backgrounds

Privacy & Data Law

  • GDPR, CCPA, HIPAA, and emerging state laws
  • FTC enforcement, breach response, data governance
  • Fastest-growing compliance specialty post-2018
  • Strong demand at every employer type

Cybersecurity Law

  • Security regulation, CISA frameworks, incident response
  • DOD, DHS, financial sector + critical infrastructure
  • Attorneys increasingly sit inside Security Operations
  • Government security clearance can open doors

AI Regulation

  • EU AI Act, NIST AI RMF, FTC guidance on AI fairness
  • Algorithmic accountability, bias, liability frameworks
  • Open doctrinal area — great for legal writing
  • Policy, regulatory, and litigation angles all growing

1L CHECKLIST: LAYING THE FOUNDATION

Focus on curiosity and exposure – not specialization.

ACADEMICS

  • Take any available IP, privacy, or tech law course
  • Use writing assignments to explore tech-related issues
  • Map your interest area early: IP, privacy, cyber, or AI
  • Read one tech law case or enforcement action per week

EXPERIENCE

  • Apply for summer roles at startups, nonprofits, or legal clinics
  • Seek pro bono work with tech-adjacent orgs
  • Audit your school's tech ecosystem: centers, journals, clinics
  • Attend at least one tech-law or women-in-law event

MENTORSHIP

  • Schedule one informational interview this semester
  • Follow up every mentor meeting with a thank-you email
  • Ask: 'How did you discover tech law?'
  • Find one professor whose research overlaps with your interests

2L CHECKLIST: BUILDING EXPERIENCE & VISIBILITY

This is when differentiation begins. Be intentional.

ACADEMICS

  • Enroll in upper-level IP, privacy, cyber, or AI law courses
  • Write a seminar paper or independent study on a tech topic
  • Track real-time developments: FTC actions, EU AI Act, AI litigation
  • Consider joining a tech law or IP law journal

EXPERIENCE

  • Pursue clinics, externships, or internships with real clients
  • Target summer associate roles at firms with tech practice groups
  • Look for government internships: FTC, USPTO, DOJ, state AGs
  • Consider policy roles at think tanks or advocacy organizations

MENTORSHIP

  • Join a national org for women in tech or law (ChIPs network, WiTL (Berkeley), Women Who Lead ILTA)
  • Identify two mentors, each at different career stages
  • Attend at least one local or national tech law conference
  • Publish a short case summary or explainer post online

3L CHECKLIST: TRANSITIONING T O PRACTICE

Momentum matters more than perfection. There is no single right path.

ACADEMICS

  • Take capstone or advanced courses in your intended area
  • Refine writing samples to showcase tech-related work
  • Ask professors for recommendations specific to tech law firms
  • Explore dual-degree or certificate programs if available

EXPERIENCE

  • Research hiring timelines for BigLaw, government, and in-house
  • Ask mentors directly about interview strategies
  • Tailor your resume to emphasize tech-relevant experience
  • Learn to explain complex tech concepts in plain language

POSITIONING

  • Build a simple LinkedIn that signals your tech law focus
  • Publish one substantial piece of writing if you haven't yet
  • Identify 3–5 target employers and research their tech practices
  • Network into your target sector via your mentor's network

CAREER PATHS IN TECH LAW

Different destinations — all rewarding.

BigLaw Tech Group

  • High-volume transactional + litigation work
  • IP licensing, data breach response, M&A tech diligence
  • Strong training, high salary, demanding hours
  • Entry: SA → Associate; look for dedicated tech/IP groups

In-House Counsel

  • Embedded legal advice at tech companies
  • Roles span privacy, product, commercial, compliance
  • Culture varies widely; often better work-life balance
  • Entry: 2–4 yrs firm → lateral move is most common path

Government & Regulatory

  • FTC, DOJ, FCC, USPTO, CISA, state attorneys general
  • Meaningful public impact; strong training
  • Often requires clerkship or public interest background
  • Entry: directly post-law school or after 1–2 yrs firm

Nonprofit & Policy

  • Electronic Frontier Foundation, ACLU, Center for Democracy and Technology, Access Now, AI Now Institute
  • Civil liberties, digital rights, algorithmic justice
  • Often combined with fellowships (Skadden, Equal Justice)
  • Writing and advocacy skills prized above firm experience

INTELLECTUAL PROPERTY LAW

What IP lawyers do in tech

  • Patent prosecution: drafting and filing patent applications
  • Patent litigation: Markman hearings, IPR proceedings, district court trials
  • Licensing: negotiating IP rights for software, platforms, and AI models
  • Trade secret protection: NDAs, employment agreements, misappropriation claims
  • Copyright: software code, databases, AI-generated works
  • Trademark: brand protection for tech companies globally

IP touches every industry — from pharmaceuticals to social media algorithms.


COURSES TO TAKE

  • Patent Law
  • Copyright Law
  • Trademark
  • Technology Licensing
  • IP Transactions

TECHNICAL BACKGROUND?

  • Patent prosecution = USPTO requires a technical degree
  • Patent litigation, licensing, & copyright = no tech degree needed
  • Consider taking a 'Patent Law for Non-Scientists' course

PRIVACY & DATA LAW

What privacy lawyers do

  • Drafting and auditing privacy policies and data processing agreements
  • GDPR, CCPA/CPRA, HIPAA, COPPA, FERPA compliance programs
  • Data breach response: notification obligations, regulatory investigations
  • Cross-border data transfers: SCCs, adequacy decisions
  • Privacy by design: advising product and engineering teams
  • FTC enforcement, state AG investigations, class action defense

Privacy law is one of the most accessible entry points — no technical degree required.

KEY LAWS TO KNOW

  • GDPR (EU) · CCPA/CPRA (CA) · CPA (CO)
  • HIPAA (health) · FERPA (education)
  • Children's Online Privacy Protection Act (COPPA)
  • Emerging: TX, FL, VA, MT comprehensive privacy laws

WHY IT'S BOOMING

  • 50+ US state privacy laws passed or pending since 2018
  • FTC increasingly active in consumer data enforcement
  • AI systems create new data consent and bias challenges
  • Every company is now a data company — demand is everywhere

CYBERSECURITY LAW

What cybersecurity lawyers do

  • Incident response: breach investigations, forensics coordination
  • Regulatory compliance: CISA, NIST frameworks, SEC cyber rules
  • Government contracting: CMMC, FedRAMP, DFARS compliance
  • Insurance: cyber liability policy negotiation and coverage disputes
  • Critical infrastructure security: energy, finance, healthcare sectors
  • Litigation: class actions, enforcement defense, shareholder suits

Cyber is one of the highest-growth legal specialties — and women are underrepresented.

KEY FRAMEWORKS & AGENCIES

  • CISA (Cybersecurity & Infrastructure Security Agency)
  • NIST Cybersecurity Framework (CSF 2.0)
  • SEC cyber disclosure rules (2023–)
  • CMMC for defense contractors
  • State breach notification laws (all 50 states)

ENTRY POINTS

  • Government: DOJ NSD, FBI, CISA, NSA legal counsel roles
  • Private: incident response practices at major firms
  • In-house: CISO-adjacent legal roles at tech & finance companies
  • Note: security clearance significantly expands opportunities

AI REGULATION

What AI lawyers do

  • EU AI Act compliance (high-risk AI systems)
  • FTC guidance: deceptive AI practices, algorithmic bias
  • AI liability: who is responsible when an AI system causes harm?
  • IP and AI: copyright in AI-generated works (Thaler v. Vidal, et al.)
  • Track law on deepfakes, voice cloning, and emerging personality rights
  • AI governance policies, model cards, and use policies
  • Negotiate AI vendor contracts and data licensing agreements

AI regulation is still being written. Law students who engage now help shape it.

KEY FRAMEWORKS

  • EU AI Act (2024) — risk-tiered global standard
  • NIST AI Risk Management Framework (AI RMF)
  • Executive Orders on AI
  • FTC: commercial surveillance, AI fairness, deception
  • State AI laws: CO, CT, TX, CA, IL

WHY WRITE?

  • AI is an open doctrinal area in law right now
  • Student notes & seminar papers can become cited scholarship
  • Policy orgs actively recruit students with AI law writing samples
  • Writing signals expertise before you even graduate

SKILLS EVERY TECH LAWYER NEEDS

Build these in law school – before you need them at work.

Tech Translation

  • Explain how a system works — AI model, data pipeline, security vulnerability — in plain language for judges, regulators, or executives
  • Practice: weekly 'explain this technology' exercises

Risk Spotting

  • Tech law centers on identifying, prioritizing, and communicating risk
  • Practice: write short risk memos outlining tradeoffs and mitigation strategies

Professional Writing

  • Publish short posts, case summaries, or explainers on emerging tech issues
  • Consistent, visible writing builds credibility — and opens doors

Techical Lieteracy

  • You don't need to code, but you need to understand what code does
  • Take a free course: CS50 (Harvard), AI for Everyone (Coursera), or Privacy Law Fundamentals

Contract & Regulatory Fluency

  • Read actual tech contracts: DPAs, SaaS agreements, AI vendor terms
  • Follow regulatory developments: FTC reports, EU agency publications, CISA advisories

Staying Current

  • The law changes faster than casebooks. Subscribe to newsletters, follow key academics and practitioners on LinkedIn and Bluesky

MENTORSHIP: QUESTIONS THAT OPEN DOORS

Ask these – and listen closely. Then follow up.

Q1  ▸  "How did you position yourself for your first tech-facing role?"

Reveals the experiences that generated real experience— coursework, clinics, writing, or technical exposure. Ask which mattered most.

Q2  ▸  "What skills do junior tech lawyers most often lack?"

Invite candid feedback on gaps new hires have: technical literacy, contract drafting, regulatory framing, or communication.

Q3  ▸  "How do you stay current in such a fast-moving field?"

Learn which newsletters, conferences, or communities they rely on, so you can build sustainable habits early.

Q4  ▸  "Was there a moment you felt you didn't belong? How did you navigate it?"

Women-specific question. Creates space for honest conversation and surfaces strategies for navigating exclusion.

Q5  ▸  "Who else should I be talking to?"

The most important networking question. Always ask. A warm introduction from a mentor is worth ten cold emails.


Always send a thank-you email. Always. Circle back when you read something relevant to their work.

KEY ORGANIZATIONS & COMMUNITIES

Your professional home starts here.

FOR WOMEN IN LAW & TECH

  • Ms. JD —community + resources for women law students — ms-jd.org
  • WITI (Workforce, Innovation, Trust and Influence—originally Women in Technology International) — witi.com
  • National Association of Women Lawyers (NAWL) — nawl.org
  • ABA Commission on Women in the Profession — americanbar.org/groups/diversity/women/
  • Legal Hackers — legalhackers.org — tech + law community

FOR TECH LAW PRACTICE

  • International Association of Privacy Professionals (IAPP) — iapp.org
  • Electronic Frontier Foundation (EFF) — eff.org
  • Future of Privacy Forum (FPF) — fpf.org
  • Center for Democracy & Technology (CDT) — cdt.org
  • AI Now Institute — ainowinstitute.org
  • Berkman Klein Center (Harvard) — cyber.harvard.edu

FOR LAW STUDENTS

  • ABA Law Student Division — Tech Law Committee
  • National Law Review (student-written articles welcome)
  • Cybersecurity Law Report — law.com
  • Student portals: IAPP, ABA SciTech
  • Ms. JD Fellowship Program

NEWSLETTERS TO SUBSCRIBE TO NOW

  • Lawfare (lawfaremedia.org) — national security, cyber, AI policy
  • IAPP Daily Dashboard — privacy law news
  • Tech Policy Press — independent tech policy journalism
  • The Algorithm (MIT Tech Review) — AI coverage
  • Cyberlaw Podcast (Steptoe) — excellent for cybersecurity law
  • One Tech World — women in technology newsletter

COURSES TO TAKE

  • CS50: Introduction to Computer Science (Harvard/edX) — FREE
  • AI for Everyone — Andrew Ng (Coursera) — FREE
  • Privacy Law Fundamentals — IAPP (member access)
  • Cybersecurity for Business — University of Colorado (Coursera)
  • Introduction to Intellectual Property — USPTO free resources
  • Data and Information Privacy — WisconsinX (edX) — FREE

NETWORKING & PROFESSIONAL VISIBILITY

You don't have to be everywhere. You have to be somewhere — consistently.

LINKEDIN STRATEGY

  • Headline: 'Law Student | Tech Law & Privacy | [School] '27'
  • Post one short reflection or case summary per month
  • Connect with every attorney you meet — within 24 hours
  • Follow: IAPP, EFF, FTC, Berkman Klein Center
  • Engage thoughtfully on tech law posts — comments get seen

WRITING FOR VISIBILITY

  • Submit to your school's tech law blog or law review online
  • National Law Review accepts student submissions
  • Write 300-word LinkedIn posts on key court decisions
  • Target: one piece published per semester
  • Your writing sample is your first interview — make it good

CONFERENCES & EVENTS

  • IAPP Global Privacy Summit (spring, Washington D.C.)
  • ABA TechShow (spring, Chicago)
  • Future of Privacy Forum annual summit
  • Ms. JD Leadership Academy (annual, in-person)
  • Virtual options exist for most — student rates often available

AMANDA BARRAZA

Amanda Barraza is a rising 3L at Santa Clara University School of Law, where she holds a full-tuition Dean’s Fellowship and serves as Section Editor for the Santa Clara Business Law Chronicle. Her legal interests lie at the intersection of technology, intellectual property, privacy, and AI governance.

Before law school, Amanda spent nearly two decades in Taiwan, where she founded and managed a language learning center, developing a deep expertise in education, entrepreneurship, and cross-cultural communication. Fluent in Mandarin and equipped with an MBA from National Taiwan University, she brings a global and strategic lens to her legal work.

Amanda has supported legal teams across the technology and IP landscape, including at Pure Storage, where she led a company-wide AI compliance audit. She has also worked for boutique firms on specialized projects in patent analysis, AI governance standards, and technology transactions, and works as a thought leader for an IP management startup. Amanda hopes to apply her legal skills to the evolving challenges of AI governance and ethics, helping organizations navigate complex regulatory, privacy, and societal concerns.

Outside of law, Amanda is a lifelong writer and editor who has collaborated on academic and policy publications across Asia and the U.S. A single parent to two amazing daughters, she enjoys weightlifting, learning languages, reading poetry, and spending time with her kids.