Latest / The Side Hustle Career Podcast with Fexingo: Second Income, Freelancing While Employed / How a Government Analyst Built a 15K Side Hustle in Data Privacy
Transcript
- Lucas: So there's a stat that's been bouncing around in my head all week — by some estimates, the global data privacy consulting market is growing at over twenty percent a year. And the interesting part isn't the big law firms. It's the solo practitioners who are picking up the slack for small and mid-sized businesses. Luna: That's a big number. And it makes sense — every little shop that handles customer data is suddenly aware that privacy isn't optional. Lucas: Exactly. And today's guest is someone who turned that awareness into a fifteen thousand dollar a month side hustle. She's a government data analyst by day — which I find fascinating because it's not the typical background you'd expect for a privacy consultant. Luna: What does a government data analyst even do that translates to privacy consulting? Lucas: That's the question I wanted to dig into. She said her day job involves handling sensitive datasets, understanding classification levels, and being meticulous about access controls. So when a friend who runs a local clinic asked for help with a privacy audit, she realized she had a skill set most small businesses simply don't have in-house. Luna: A clinic — that's a high-risk environment for health data. So she started with something she knew cold. Lucas: Right. And she didn't start with a website or a business card. She started with one client, did a thorough job, and let word of mouth do the marketing. Within six months she had five recurring clients and was turning away work. Luna: Turning away work — that's a good problem to have. But what exactly does a privacy consultant deliver for a small business? Is it just writing policies? Lucas: It's more than that. She breaks it into three buckets. First, the compliance audit — looking at how data flows through the business, where it's stored, who has access. Second, the gap analysis — mapping that against regulations like GDPR or CCPA, depending on the client's footprint. And third, the practical stuff: employee training, incident response plans, and helping them choose the right tools. Luna: So it's not just a document drop. It's ongoing support. Lucas: That's what she emphasizes. The recurring revenue comes from the retainer model — most of her clients pay a monthly fee for continuous monitoring and response. That's where the fifteen thousand a month comes from, not one-off projects. Luna: How did she price it in the beginning? That's always the hardest part for new consultants. Lucas: She started at a flat rate — fifteen hundred for a basic audit, which she admits was underpriced. But it got her in the door and built her portfolio. Now she charges three to five thousand for a comprehensive audit and retains clients at a monthly rate that scales with their size. Luna: That's a pretty wide range. What determined the price? Number of employees? Data volume? Lucas: She said it's a mix of complexity and risk. A dental practice with thirty employees is different from an e-commerce store with a million customer records. She explains the rationale upfront and lets the client see the value in the line items. Luna: That transparency probably helps with trust, which is huge in this field. You're essentially handling their compliance liability. Lucas: Exactly. Which brings me to a bigger point — the trust factor is why she didn't need a fancy website. Her government background, oddly enough, gave her credibility. She's used to handling sensitive data with proper clearance protocols, and clients read that as competence. Luna: I bet that also helped with the legal side. Did she ever worry about needing a law degree? Lucas: She did at first. But she found that most small businesses don't need legal opinions — they need practical implementation. She's upfront that she's not a lawyer, and she works with one for the rare cases that require formal legal counsel. That boundary keeps her scope clear. Luna: Smart. So she's not overstepping, she's carving a niche that's in demand. What about the tools she uses? I imagine there's a stack for audits. Lucas: She keeps it simple — spreadsheets for data mapping, a checklist tool for audits, and screen recording software to document findings. She says the real product is her analysis, not the tools. And she does everything in a virtual data room to keep her own processes secure. Luna: That's a nice touch — practicing what she preaches. But I'm curious, what's the biggest mistake she sees in her clients? Lucas: Assuming that compliance is a one-time event. She often walks into a clinic that did a HIPAA audit three years ago and hasn't touched it since. The threat landscape changes, staff turn over, and new tools get added — all of that creates gaps. Luna: So her retainer model is actually solving a real problem, not just creating recurring revenue. Lucas: That's the key insight. She's not inventing a need — she's responding to one that already exists. And the fact that she's doing this on the side, after a full day at a government job, is a lesson in time management as much as anything. Luna: How does she balance it? I can't imagine doing audits after work without burning out. Lucas: She's strict about her hours — two weeknights and one weekend morning. She uses a scheduling tool and batches her client work. She also says she's careful not to take on more than three audits at a time, because quality is her reputation. Luna: That's a great discipline. And it's a good reminder that a side hustle shouldn't eat your whole life. Lucas: Yeah, and that's part of what we talk about on this show — building something sustainable. If a side hustle is just adding stress, it's not worth it. But when it's something you're genuinely good at and enjoy, it can be a real career accelerant. Luna: And on that note, if this show has helped you think through your own side hustle possibilities, you might consider supporting what we do. It's listener support that keeps this podcast ad-free and independent. Lucas: Yeah, we've had a lot of listeners tell us these episodes have given them the nudge to try something new. If that's you, and you're in a position to help, you can buy us a coffee at buy me a coffee dot com slash fexingo. It goes directly to keeping this show going. Luna: No pressure, but if it's made a difference for you, it's a way to pay it forward. Now, back to our analyst — she also mentioned something about avoiding scope creep. Lucas: Right. She had a client who kept asking for 'just one more quick thing' — policy updates, vendor reviews, even a mock audit. She realized she was giving away hours for free. So she now has a strict policy: anything outside the agreed scope is a new proposal. Luna: That's a hard lesson for a lot of freelancers. How did she make that work without damaging the relationship? Lucas: She frames it as professionalism — 'let me put together a clear estimate so you know exactly what you're paying for.' That keeps the client informed and protects her time. She said the client actually respected her more for it. Luna: That's a good boundary. And it goes back to what you said about trust — being upfront about scope is part of being trustworthy. Lucas: Exactly. She's also planning to start offering group training sessions for small business owners, which is a way to scale without taking on a hundred individual clients. That could push her income even higher, but she's doing it deliberately. Luna: Deliberate is the word. She's not chasing every revenue stream — she's building a practice that fits her life. Lucas: And that's the takeaway. The market for privacy expertise is only going to grow, but the people who succeed will be the ones who stay focused on a niche, set clear boundaries, and deliver real value. Not the ones trying to be everything to everyone. Luna: Well said. If this episode made you think about your own data skills differently, we'd love to hear about it. Until next time.