The pathway
How you actually get there, here
How you become one varies far more by country than what one does. This is the UK route. Most people take one of these ways in; the right one depends on where you're starting from.
- 1
Director, Information Governance
5-7 years at this level before CDGOSkills to master
- Enterprise programme management, board reporting, multi-year strategic planning, significant budget ownership (£2M-£10M+), leading large, multi-functional teams.
You're ready to move on when
- Successfully led a major enterprise-wide governance transformation programme.
- Regularly presented on information risk to the Board and executive committees.
- Managed a budget exceeding £5M and a team of 25+ people.
- Recognised as a thought leader within the company and industry.
- 2
Chief Privacy Officer (CPO)
3-5 years at this level before CDGO (if CDGO role is broader)Skills to master
- Deep expertise in global privacy regulations, managing privacy-by-design programmes, handling major data breaches, strong external regulatory relationships, and influencing product development for privacy.
You're ready to move on when
- Successfully navigated a complex, high-profile privacy incident with regulators.
- Embedded privacy-by-design principles into core product development cycles.
- Represented the company effectively in public forums on privacy matters.
- Built and led a high-performing privacy team.
- 3
General Counsel (GC) with Strong Data Specialisation
5-10 years as GC before CDGOSkills to master
- Comprehensive legal expertise in information law, litigation management (especially eDiscovery), regulatory liaison, and providing strategic legal advice to the Board on data-related risks.
You're ready to move on when
- Successfully defended the company in data-related legal challenges.
- Developed and implemented legally defensible data retention and eDiscovery policies.
- Provided strategic legal counsel on major data-driven business initiatives.
- Deep understanding of the operational realities of data management.