Over the past decade, chief information security officers (CISOs) have become more commonplace in university settings, and more recently we are seeing the emergence of chief privacy officers (CPOs). In this panel we’ll explore the evolving nature of these positions and examine how they relate to each other and to the roles of the chief information officer, the university librarian, and other institutional leadership. A specific focus will be on third-party data collection via instructional technology (for example, adaptive learning platforms or e-textbooks), or through electronic journal platforms offered by major publishers, and how CISOs and CPOs become involved in decision-making and policy development in these areas.