Our client, a global consulting company serving a diverse range of industries including insurance, healthcare and finance, is seeking a U.S. Data Privacy Attorney on a full-time engagement basis, with the potential to convert to a permanent position based on performance and business needs. Reporting to the Global Data Privacy Director located in the EU, the Data Privacy Attorney will be a member of the company's global data privacy team, which is part of the company's Legal and Compliance General Corporate Services. The person in this role will assist the Global Data Privacy Director with the implementation of the privacy program in the US and in Canada, including processes, procedures and initiatives, and to collaborate with other departments and practices in support of the US/Canadian privacy program.

Although the primary focus will be the USA/Canada, the Data Privacy Attorney will be involved in international projects and collaborate with data privacy counsels in charge of other regions, including with peers located in the EU and Asia. This role offers excellent growth opportunities and is ideal for a mid-level Data Privacy Attorney eager to advance to a Senior Data Protection Advisor position in the short term, and to a Head of Data Protection for the USA/Canada in the future.

Responsibilities for Data Privacy Attorney (Temp to Perm; Remote or Hybrid)
In this role, you will:

Conduct research and monitor new and revised applicable U.S. and Canadian privacy laws, regularly reporting findings to the Global Data Privacy Director.
Provide legal advice on a day-to-day basis.
Assist with the implementation of the company's Global Data Protection Policy in the USA/Canada.
Prepare and present various data privacy trainings to the company's U.S./Canadian practices.
Negotiate U.S. Data Sharing Agreements and collaborate with the company's U.S. legal team.
Respond promptly to requests for data privacy advice from the business, including assisting in responding to prospect and customer data protection questionnaires.
Assist with identifying privacy risks in processes and systems and propose mitigations.
Identify any gaps in policies/procedures based on regulations and recommend prioritization of addressing gaps.
Assist with the implementation of the company's international Vendor Management Program, participate in U.S./Canada vendor due diligence checks, and contract negotiations.
Maintain a network of local DPCPs (Data Privacy Contact Persons) and providing them with advice and regular training when needed.
Assist with the drafting of employee notices/consent forms where required.
Maintain company's Records of Processing Activities.
Review company’s Data Mapping Questionnaires annually.
Assist with the management of Data Subject Access Requests (DSARs) and other requests from data subjects residing in the US.
Assist with the drafting of Data Protection Impact Assessments where required.
Monitor implementation of data privacy recommendations made under Privacy Impact Assessments.
Assist with internal audits, privacy reviews and self-assessment analyses.
Review the company’s data protection compliance arrangements to include doing a risk assessment, updating policies and guidance, centralizing processes and assisting key departments in putting in place robust remedial plans where necessary.
Serve as a subject matter expert and assist the company in developing and implementing a robust compliance plan.
Partner with all key business areas, including the IT Security team and insurance risk teams, to ensure data privacy issues are considered at the outset of new projects, products and initiatives.

Minimum Requirements for the Data Privacy Attorney:

JD from a top US law school and active bar membership in good standing.
4+ years as a data privacy attorney with a large corporate legal department or the corporate department at a well-respected full-service law firm
Must be located in areas covered by the U.S. Eastern Standard Time Zone. Preferably (but not mandatory) someone who is located in New York City.
Experience analyzing complex privacy and data security laws and regulations, providing legal counsel, and developing actionable business policies and action items
Must have working knowledge of US federal and state data privacy laws, including HIPAA/HITECH, GLBA, FCRA, and have ability to deal with relevant laws across several states
Required a global perspective and good understanding of international data privacy laws, in particular, GDPR.
CIPP certification through the IAPP (CIPP/US) preferred.
IT security knowledge preferred.
Must be skilled in documenting compliance actions.
Must have excellent organization and planning skills, with the ability to (i) report and draft summaries of action plans, (ii) create plans and diligence to follow through and (iii) monitor plans through execution and completion, and have the ability to draft summaries and reports of legal analyses in a structured manner.
Must have strong contract drafting and negotiating experience.
Requires a collaborative workstyle and a strong sense of team spirit, having the capacity to adapt to the working style and organization of the team and embracing different cultures and perspectives.
Demonstrated experience in giving data privacy related trainings.
Must have demonstrated professionalism in interactions with external clients.
Must have excellent written and communication skills.
Must have exceptional interpersonal skills.
Ability to clearly and concisely communicate complicated issues and the impact on business operations, and incorporate privacy and data use provisions in contracts
Outstanding references

Position Details of the Privacy Attorney:

Type of role: Engagement
Schedule: Full-time (40 hours per week). Willingness to transition to a permanent full-time role based on performance.
Location: Must be located in areas covered by the U.S. Eastern Standard Time Zone. Work is done remotely, but preference given to applicants who can work in company’s office in New York city 1-3 times a week.

Compensation
The annualized compensation for this position ranges from $120,000 to $180,000. Pay is based on numerous factors including but not limited to work experience, qualifications, credentials and location. In addition to salary, Latitude Engaged Professionals are W2 employees of Latitude and are eligible for full benefits when working in roles for 20 hours per week, including a Qualified 401k plan. Benefits-eligible Latitude employees receive complimentary Group Life, LTD and AD&D and professional liability insurance. Latitude Attorneys also receive a CLE and Professional Expense stipend.

Confidentiality
Latitude will not disclose your identity or propose you to prospective clients without your prior consent. Candidates selected for further consideration will be contacted.
Only qualified applicants should apply.

About Latitude
Latitude is a full-service national legal services company that specializes in providing high-end, flexible contract engagements and permanent positions to outstanding attorneys, paralegals, compliance officers and legal operations professionals. We work closely with our candidates to understand their career goals and match them with the substantive engagements they want with our clients, who range from Fortune 500 corporations to small companies and Global 50 law firms to boutiques. With offices coast-to-coast, we employ legal professionals across the country. Latitude’s client service leaders and recruiters are all former practicing attorneys and understand the demands faced by those we serve.

Latitude Engagements
Great attorneys and other legal professionals who are seeking contract engagements or consulting roles choose to work with Latitude because of our competitive compensation and benefits, sophisticated and engaging work, a chance to work with great clients and peers, and a refreshing blend of freedom with self-designed boundaries. Our own experience as practicing attorneys and our client relationships enable us to effectively tailor our candidate proposals to the specific practice strengths and interpersonal attributes that matter most to our clients and to match our candidates with the opportunities that will be most fulfilling to them.

Latitude engaged professionals have the level of skill, experience, and judgment as would be expected of a permanent member of our client’s corporate legal department or law firm and the versatility to step into challenging environments and hit the ground running.

If you have the right skills, personality and experience, Latitude helps you do what you are good at in a more rewarding way. Latitude engaged professionals serve on a full- or part-time engagement basis, and work remotely or on-site at the client office.

While we are able to work only with a select few of the most outstanding candidates, our customized approach results in a high success rate for those candidates we recommend.

For more information about Latitude, please visit us at https://latitudelegal.com.

Latitude is an Equal Opportunity Employer

LATWA

Data Privacy Attorney (Temp to Perm; Remote or Hybrid)

Ready to get started?