Privacy and data security law are no longer niche practice areas. Many law schools now offer classes to give students a substantive background on these topics, most large law firms have established privacy and cybersecurity practice groups, and business is booming for boutique firms focused in these practice areas.