I really want to highlight a few points - in red and in bold:
“What started to grow was the notion of a privacy officer or privacy
manager as someone who could run a program that could pull together the
technical and the legal piece, and I think everyone in the profession at
the time thought that was a really good thing,” Kosa said. “But as the
discipline grew, as the domain evolved, a lot more people got interested
in it, but a lot of those people got interested not for the same
reasons the people who grew the field were interested in it.”
In other words, it turned into a compliance-based exercise.
That shift didn’t sit well with her. What irked her was her sense
that the field was losing its strong base of privacy advocates, replaced
by professionals who were saying to companies, “I can knock out a
privacy impact assessment for you for $50,000, no problem.”
Personally I think she probably got a good deal for $50k ...
Let me say this again: PRIVACY IS A COMPLIANCE ACTIVITY
I also particularly like the learnings she's brought from medicine to the area...specifically she's promoting a the basis of the approach to safety-critical systems .... now, I wonder who promoted that idea before....?