It's a pretty niche field. I would recommend reading privacy legislation in your state or country, and/or the syllabus for the CIPP certifications, which are for privacy professionals.