Description:
About the role:The Data Privacy Attorney is an integral part of A Global Law Firm's Information Governance team and will be responsible for collaborating with the Office of the General Counsel, the Security & Risk Management department, and the Audit & Advisory department to ensure firm use of personal data is compliant with data privacy laws in the United States, European Union, Asia, and the Middle East, while working closely with the firm's Procurement function and Security Review Team to review, draft, and negotiate vendor contracts and other commercial relationships involving the transfer of personal data. This role will be located in either our New York or Washington, D.C. office. Please note that this role may be eligible for a flexible working schedule that allows for a hybrid and in-office presence.
Responsibilities & Qualifications
Other key responsibilities include:
- Working with members of the Global Data Privacy Office (“GDPO”) and other key internal stakeholders to review proposed projects involving the collection or utilization of personal data, advising on privacy risks, and compliance with local data privacy laws, and where necessary, carrying out privacy impact assessments
- Working with Information Governance and other privacy attorneys in the firm to respond to requests from individuals to exercise their rights under applicable data privacy laws in the United Kingdom, European Union, and the United States, including requests to access or delete their personal data
- Working with members of the GDPO to implement measures necessary to demonstrate compliance with applicable data privacy laws, including managing and updating records of processing activities, assisting with data mapping, and conducting vendor management reviews
- Reviewing and updating transparency notices, privacy policies, and procedures globally, while coordinating and assisting with data privacy audits of the firm's offices worldwide
- Working with members of the GDPO to maintain the firm's Binding Corporate Rules, supporting their ongoing review and continued management across the firm
- Protecting and maintaining any highly sensitive, confidential, privileged, financial, and/or proprietary information that A Global Law Firm retains
- Demonstrate well-developed and professional interpersonal skills, with the ability to interact effectively with people at all organizational levels of the firm
- Possess strong project management and organizational skills, including the ability to manage time well, prioritize effectively, anticipate obstacles, and handle multiple deadlines
- Exhibit the ability to use initiative in driving improvements to the firm's compliance posture
- A Juris Doctor (JD) or equivalent from an accredited law school
- A minimum of five (5) years of relevant experience
- Experience in advising on European Union data privacy law, preferably
