Salary benchmarks · Privacy
Chief privacy officer salary in 2026
What a chief privacy officer or head of privacy is paid, by company segment, and what a company should budget to hire one. The table comes first.
Chief privacy officer salary by company segment, 2026.
Median base, target bonus and sample for each segment we benchmark. Each figure carries its year. The window is January 2023 to September 2026.
| Segment | Median base (2026) | Target bonus (2026) | Data points |
|---|---|---|---|
| Series C+ venture-backed, US, first privacy lead | $235,000 (2026) | 15% (2026) | 9 |
| US listed mid-cap, chief privacy officer | $345,000 (2026) | 40% (2026) | 11 |
| US large-cap regulated (health, financial), chief privacy officer | $450,000 (2026) | 60% (2026) | 7 |
| US head of privacy (VP or director, reports to GC) | $265,000 (2026) | 25% (2026) | 12 |
| UK or EU listed, combined CPO and DPO | £175,000 (2026) | 30% (2026) | 6 |
Base and bonus are cash. Equity is excluded and is typically added at listed companies. A segment figure is a median of a small sample and is orientation for a conversation, not a quote.
Source: Sartori & Partners benchmark, January 2023 to September 2026.
- $200,000
- US chief privacy officer median, IAPP salary survey, 2019.
- IAPP
- $123,000
- Median for respondents working solely in privacy, all levels, March to April 2025.
- IAPP Salary and Jobs Report 2025-26
- 20
- US states with a comprehensive privacy law in effect in 2026.
- IAPP
How a privacy leader should read the number.
The table is a median. Four things decide where you sit against it.
Reporting line. A chief privacy officer who reports to the CEO or a board committee sits above a head of privacy who reports to the general counsel. In our 2026 data the gap is roughly $80,000 of base between the listed mid-cap CPO and the head of privacy, before bonus.
Regulated data. Health, financial and children's data move a seat from the mid-cap row to the large-cap row even at a smaller company. The regulator relationship is the expensive part of the job.
Statutory designation. If you are also the data protection officer under GDPR Articles 37 to 39 (2016), your independence is protected by law, but the pay is not. Ask whether the title is paid as an officer or as a counsel seat.
Scope beyond privacy. If the brief now covers training data, vendor models and the EU AI Act, you are being asked for two jobs. Price the overlay into base. In our 2026 data it is worth a median 12%, and IAPP's 2025 survey shows $169,700 for combined privacy and AI governance against $123,000 for privacy-only (March to April 2025).
Ask for the letter to state the bonus target, the equity grant in dollars, the reporting line and the severance on a change of control. A base figure alone is not an offer.
What a company should budget for a chief privacy officer.
Budget total first-year compensation, not base, because the search fee and the offer both work from it.
A US listed mid-cap company hiring a chief privacy officer in 2026 should plan on a base of about $345,000 and a 40% target bonus, which is $483,000 in year-one cash before equity. The retained fee is 25-30% of that total, and 30% of the fee is paid as a retainer at engagement.
Three decisions move the budget more than the market does. First, the reporting line: a CEO or committee line prices as an officer, a general counsel line prices as a head of privacy. Second, whether the seat is also the statutory data protection officer. Third, whether the AI-governance work is inside the seat or a separate hire. Settle all three before the job description is written, or the shortlist will mix two price points.
The scope has grown. 20 US states had comprehensive privacy laws in effect in 2026, up from one in 2018 (IAPP). A seat scoped for 2018 is under-priced in 2026.
Chief privacy officer, head of privacy and data protection officer.
People searching for CPO pay are often describing one of three different jobs.
| Seat | Who designs it | Typical reporting line | Pay reads as |
|---|---|---|---|
| Chief privacy officer | The company | CEO, board committee or GC | Officer compensation, with bonus target and equity |
| Head of privacy | The company | GC or chief compliance officer | Senior counsel or VP compensation |
| Data protection officer | GDPR Articles 37-39 (2016) | Highest management; independent on Article 39 tasks | Counsel or officer, depending on whether it is combined |
One person can hold more than one title. The search brief is on chief privacy officer search and, for the statutory seat, data protection officer search.
Source: Regulation (EU) 2016/679, Articles 37-39.
The search side of this is set out on chief privacy officer search and data protection officer search. A standing AI-governance mandate is a different hire: see AI governance counsel.
Six findings from our privacy compensation data, 2026.
Each finding names its segment, base and window. The window is January 2023 to September 2026 for all six.
- Venture-backed first privacy lead. Series C+ companies in the US paid a median base of $235,000 in 2026 (n=9), with a 15% bonus and equity carrying the rest.
- Listed mid-cap CPO. US listed mid-caps paid a median base of $345,000 in 2026 (n=11), with a 40% target bonus.
- Large-cap regulated CPO. US large-cap health and financial companies paid a median base of $450,000 in 2026 (n=7), with a 60% target bonus.
- Head of privacy under the GC. US vice presidents and directors of privacy reporting to the general counsel had a median base of $265,000 in 2026 (n=12), with a 25% bonus.
- Combined CPO and DPO, UK and EU listed. The median base was £175,000 in 2026 (n=6), with a 30% bonus.
- AI-governance premium. Across 10 matched pairs, the seat with an AI-governance mandate paid a median 12% more base than its privacy-only peer in 2026.
These are medians of small samples drawn from Sartori searches, offer letters and calibration interviews. They describe the companies we work with and are not a survey of the whole market. Use the outside benchmarks below for the market view.
What the published surveys say.
Two IAPP data points bracket the market. They measure different populations from ours.
IAPP's salary survey put the US chief privacy officer median at about $139,000 in 2015, $170,000 in 2017 and $200,000 in 2019, a rise of about 44% since 2015. That is the last CPO-specific median we rely on and it is seven years old, so it understates 2026 pay.
IAPP's Salary and Jobs Report 2025-26, published 3 August 2025, surveyed more than 1,600 people in over 60 countries between March and April 2025. Half of those working only in privacy earned less than $123,000, and half of those combining privacy and AI governance earned more than $169,700. The sample covers all levels worldwide, so it sits well below any officer row in the table above. Bonus was received by 72% of North American respondents.
For neighbouring seats, see chief compliance officer pay 2026 and the general counsel salary guide for 2026, since the privacy leader usually reports into one of them.
How the search runs and what it costs.
Retained only. The letter states the fee, the replacement window and the reporting line before anyone is called.
Sartori & Partners, founded in 2017, has completed 400+ placements (230+ in-house), 36 of them in compliance and regulatory leadership that includes chief privacy officer and data protection officer seats. The fee is 25-30% of total first-year compensation. The replacement window is 12 months on retained GC, CLO and CCO searches and 6 months on other in-house searches; the letter states which applies to a privacy seat.
A privacy and AI-governance counsel search for a Euronext-listed insurer in Brussels reached an accepted offer in 8 weeks, with a bilingual shortlist. A chief privacy officer search typically runs about 10 weeks from brief to accepted offer. How the search is run.
Chief privacy officer salary: common questions
What is a chief privacy officer's salary in 2026?
At a US listed mid-cap company the median chief privacy officer base in 2026 is $345,000 with a target bonus of 40% (Sartori data points, January 2023 to September 2026, n=11). At a large-cap regulated company it is $450,000 with a 60% target bonus. For an outside reference, IAPP's survey put the US chief privacy officer median at $200,000 in 2019, and its 2025 survey of more than 1,600 people put privacy-only respondents at a $123,000 median (March to April 2025).
What does a head of privacy earn compared with a CPO?
A head of privacy at vice president or director level reporting to the general counsel has a median base of $265,000 in 2026 with a 25% target bonus (n=12, January 2023 to September 2026). The chief privacy officer title carries a higher base and bonus target mostly because of the reporting line to the CEO or a board committee and the regulator-facing remit.
Is a data protection officer paid like a CPO?
Not automatically. A data protection officer is a statutory designation under GDPR Articles 37, 38 and 39 (Regulation (EU) 2016/679, 2016) and can sit well below officer pay. Where one person holds both titles at a listed UK or EU company, the median base in 2026 is £175,000 (n=6, January 2023 to September 2026).
Does AI governance experience raise chief privacy officer pay?
Yes. In our data, a privacy leader whose mandate includes AI governance earns a median 12% more base than a privacy-only peer in the same segment in 2026 (10 matched pairs, January 2023 to September 2026). IAPP's 2025 survey shows the same direction: $169,700 median for combined privacy and AI governance against $123,000 for privacy-only (March to April 2025).
How much of chief privacy officer pay is bonus and equity?
Bonus is common: 72% of North American respondents in IAPP's 2025 survey received one. Target bonus runs from 15% of base at venture-backed companies to 60% at large-cap regulated companies in our 2026 data, and listed companies add annual equity grants on top.
What does a company pay a search firm to hire a chief privacy officer?
Retained only: 25-30% of the hire's total first-year compensation, with a retainer of 30% of the fee paid at engagement. On a $345,000 base and 40% target bonus, cash compensation in year one is $483,000 before equity, so the fee is calculated on that total.
Why is there no single chief privacy officer salary?
The title covers a US officer the company designs, a head of privacy inside legal, and a GDPR data protection officer. Reporting line, company size, regulated data and AI overlay each move the number. 20 US states had comprehensive privacy laws in effect in 2026 (IAPP), so the programme a CPO owns is larger than it was in 2018.
The sources behind the external figures.
Sources
4 references- IAPP — Salary and Jobs Report 2025-26: Privacy, AI Governance and Digital Responsibility (published 3 August 2025) iapp.org ↗
- IAPP — Privacy pros' salaries rise, yet pay gaps by gender persist iapp.org ↗
- IAPP — New year, new rules: US state privacy requirements coming online as 2026 begins iapp.org ↗
- Regulation (EU) 2016/679 (GDPR), Articles 37-39 eur-lex.europa.eu ↗
Keep reading.
Chief privacy officer search
The retained search for the officer who owns the privacy programme, and how it differs from a statutory DPO.
See the searchChief compliance officer pay 2026
The neighbouring seat: total comp against base, and the sectors that pay most.
Read CCO payGeneral counsel salary 2026
Base, bonus and equity for the lawyer the privacy leader often reports to.
Read GC payHiring privacy and AI-governance counsel
When the standing seat is privacy, AI governance, or both.
Read the guideSalary benchmarks
All published legal-pay benchmarks.
Browse benchmarksStart a conversation
Budgeting a chief privacy officer hire?
Tell us the reporting line, the regulated data and whether AI governance sits in the seat, and we will price the package against the live market.