Responsible Tech Certificates: A Worthwhile Expense?
By Deb Donig, Siegel Research Fellow for All Tech Is Human
One question I get asked repeatedly involves whether or not those interested in responsible tech careers should get a certification around that career set.
Multiple such certificates exist across a variety of specialties; including privacy and data protection certifications (offered prominently by IAPP); AI governance and ethics (also offered by IAPP, and IEEE, the latter of which is for technical workers); certificates in security and risk management such as CISSP (Certified Information Systems Security Professional); Accessibility, UX/UI and Inclusive Design certifications (offered by IAPP); Public Interest Technology certifications (offered by Digital.gov, TechCongress Certification, or the Civic Digital Fellowship Certification); and ethics focused certificates, such as the Markkula Center Tech Ethics Certificate.
Participating in the process of writing and compiling the new textbook for the IAPP AI governance and ethics certification program allows me to see how these certifications allow for a new professionalization and codification of a broader responsible tech and public interest tech workforce. These certification programs aggregate information about the subject area in which they are located, and cover material that would allow someone taking on this training a full and robust understanding of both the laws and regulation applicable to a market or job sector; they also allow program participants and graduates to understand how to navigate the complexities of the roles that must negotiate them, including how to understand how specific state laws and regulations beyond that of, say, AI, impact how tech specific tools can be created and used in specific contexts and spaces. For instance, Virginia and Colorado have unique laws around the use of biometrics – this makes how the University of Chicago or Virginia Tech use things like fingerprints to access institution-managed tech devices, or facial recognition for campus security, distinct.
A responsible tech professional working in a role related to privacy, a product manager working on a technology that may be used in a state or country where these regulatory frameworks apply, or someone working on a college campus or a hospital associated with a university and using these technologies, should ideally know these things, and workers across any of these spaces would benefit from such a certification. To that end, getting such a certification might allow workers in a variety of roles, both responsible tech roles and the increasing number of roles that interact with tech products, leverage in identifying new career opportunities and pathways within a company, organization, or institution.
These certifications vary in time commitment, cost, and recognition across different sectors, but all provide structured pathways to develop expertise in responsible technology implementation. And certainly, as digital technology broadly, and artificial intelligence specifically, transforms our society, the need for professionals who understand not just the technical aspects but also the ethical, legal, and governance dimensions of AI is paramount. There is no doubt that the more workers who understand this material and possess this credential, the better equipped our society as a whole will be to implement tech policies, products, and procedures in ways aligned with the public interest.
Beyond compliance, the certification signals to employers, clients, and collaborators a commitment to responsible technology development. Organizations that recognize the reputational and operational risks of AI implementation will find value in professionals who demonstrate formal expertise in governance. The certification serves as a validation of an employee or potential employee’s ethical considerations in technology deployment, distinguishing you from those with purely technical expertise.
As responsible tech work, and the expectations from employers of this workforce, becomes increasingly codified, and as ideas about responsible technology practices become popularized, employers are looking for evidence that employees who claim interest in this area will provide specific functionality, not just broad ideas about values, such as human rights or social justice. In the most recent turn in industry away from self-defined responsible practices (exemplified by Google’s removal of its policy page, which had long represented the company’s commitment to human rights, civil rights, and public interest directed practices) and toward navigating legal obligations, we see the precarcity of roles where the function of work is contingent on companies deciding to abide by ethical values. Companies seek workers whose commitment to responsible practices extends beyond ideological or social justice orientation.
So too is the terrain of regulation becoming more complex, with individual states maintaining their own legislative environments and Europe also creating a distinct regulatory framework. Companies with operations across states or working transnationally need to navigate these complex, and sometimes competing, frameworks; as those frameworks complexify, they will need to hire workers who can provide guidance for compliance. Certifications are an efficacious way to both gain the skills, depth of knowledge, and area expertise needed to do these jobs and to signal to employees that a candidate is equipped to negotiate this terrain.
Workers who have this skill, in combination with other desirable skills, may have an advantage in a tight job market, as employers seek to fill a role with a worker who can wear multiple hats. The certification also positions those who have it at the intersection of multiple disciplines. AI governance requires understanding technical systems, legal requirements, ethical principles, and organizational change. Few professionals naturally span these domains, creating significant demand for those who can translate between technical teams, legal departments, policymakers, and executives. This interdisciplinary positioning opens career pathways across roles and sectors.
There is also an advantage for those interested in responsible technology, beyond career advancement. These certifications may offer structured pathways to develop the knowledge needed to ensure technology serves human values and interests, equipping human rights advocates, public interest tech activists, and tech critics with practical ways to structure and channel their desire for change and responsible practice implementation. As our society collectively navigates the profound transformations AI brings to our institutions and society, those with formal training in governance frameworks will play crucial roles in shaping how these powerful technologies are deployed.
There are, however, reasons to think carefully before enrolling in these certification programs. As complex as the current landscape may be, it is also evolving. Many certification programs struggle to keep pace with this rapid change, and knowledge can get outdated quickly. Writing this textbook, I see far too often how pending legislation, or the shifting sands of privacy regulation, or changes to the administration’s approach to applying and enforcing policy, can change status overnight.
This can mean that by the time a certificate is rolled out, or by the time someone completes the certification, the knowledge is already outdated, and by the time curriculum materials are developed, reviewed, and published, emerging issues and technological developments may already render portions outdated. This creates a risk that certification holders may have credentials indicating knowledge that doesn't reflect current best practices. And for those truly interested in ethical or responsible practices, it can be demoralizing to work in service of the narrow the scope of what is considered "responsible technology" to approaches that don't fundamentally challenge existing power structures or business models, and that focus companies on clearing regulatory hurdles at their barest minimum, rather than thinking in terms of best practices of holistic human values.
These programs are also costly, ranging from the hundreds to into the thousands of dollars for enrollment; they are also intensive in terms of time commitment. In a moment in which jobs are precarious, where companies are scaling back specifically responsible or public interest tech approaches, and where those working in these areas may also be at the highest risk, the expense and time getting a certificate may not translate into financial or professional gain. Navigating complex ethical questions about responsible approaches to technology in a role focused on those issues is a role that requires knowledge work difficult to automate; compliance, meaning the navigation of complex rule-based systems, is an area vulnerable to automation, especially by GAI.
Workers may expend a great amount of time and money to gain these certifications only to discover that their skills are outdated and the job possibilities that once were offered are evaporating. These critiques don't necessarily mean certification programs lack value, but they highlight important considerations for professionals evaluating which programs, if any, align with their career goals and values in the responsible technology space. On the other hand, when companies decide that, in a changing political landscape, they want to roll back their voluntary commitments to things like human rights or human values, they will still be required to be compliant with regulations; having a skillset that includes regulatory and compliance framework navigation will remain useful to companies even if they change their stance concerning responsible innovation.
To that end, while certification programs offer structured pathways to develop expertise in responsible technology implementation, the broader field's rapid evolution, given in particular the complexity of this political moment and complex ethical dimensions that must be considered when addressing responsible tech practices, cannot be fully captured by standardized curricula, representing an inherent limit to the effectiveness of the vision. The most effective approach for professionals interested in public interest or responsible technology may be to view certifications as complementary to—rather than substitutes for—hands-on experience, interdisciplinary education, and community engagement.
Certifications are excellent supplements to that experience, but most effective when combined with other professional skills. The strongest candidates and practitioners will likely be those who combine formal training with critical perspectives from a diversity of stakeholders. As the regulatory landscape continues to develop across jurisdictions, professionals who can navigate both technical and ethical dimensions of technology governance represent a strong candidate pool, competitive for jobs at that intersection.
RESOURCES: List of available certifications:
AI Ethics and Governance
IAPP AI Governance Professional: Covers AI risk management, impact assessments, and governance frameworks
IEEE AI Ethics Certification: Focuses on technical implementation of AI ethics principles
ForHumanity Certified Ethical AI Auditor: Training for independent audit of AI systems
Security and Risk Management
CISSP (Certified Information Systems Security Professional): Comprehensive security certification with ethical components
CRISC (Certified in Risk and Information Systems Control): For professionals who design and implement risk controls
ISC² Certified Secure Software Lifecycle Professional: Security practices throughout the software development lifecycle
Accessibility and Inclusive Design
IAAP CPACC (Certified Professional in Accessibility Core Competencies): Fundamental understanding of accessibility principles
IAAP WAS (Web Accessibility Specialist): Technical implementation of accessible digital products
Certified Professional in Web Accessibility: For web development with an accessibility focus
Public Interest Technology
Digital.gov Product Manager Certification: Government-focused training for technology development
TechCongress Certificate Program: For technology policy professionals working with legislative bodies
Civic Digital Fellowship Certification: Targeted at those bringing tech expertise to government agencies
Ethics and Human Rights
Markkula Center Tech Ethics Certificate: Practical application of ethics in technology development
Aspen Tech Policy Hub Fellowship: For professionals building tech policy expertise
Business for Social Responsibility (BSR) Human Rights Due Diligence Certification: Implementing rights-based approaches in technology
Impact Assessment
GRI Sustainability Professional Certification: Standards for impact reporting
Data Ethics Certification by Open Data Institute: Frameworks for ethical data collection and use
Algorithm Impact Assessment Professional: Evaluating societal impacts of algorithmic systems