PRIVACY LAW JOB LISTINGS

This page gathers privacy job listings. Please write to us if you know of privacy law job listings we should include.

NOTE: As we often don’t know when positions are filled, not all positions listed on this page are still open. Posted dates are approximations.

Check links for further details, including salary, qualifications, location, and responsibilities.

We advise you to apply even if you don’t quite meet requirements for years of experience, as employers often don’t adhere strictly to such requirements.

* * *

Medidata Solutions – Counsel, Privacy & AI

Responsibilities:

Commercial Support: Partner with Medidata’s commercial team on matters relating to data privacy during contract negotiations with Medidata’s customers and partners.
Product Counseling: Advise Medidata’s R&D and Product teams on privacy-by-design best practices, including providing actionable advice on data privacy, data use, and data security requirements.
Privacy & AI Governance Program Support: Provide counsel and support to Medidata’s Privacy & AI Governance Program, including policy reviews, policy updates, assessment management, and audit support.
Cross-Functional Support: Coordinate with cross-functional partners such as our information security and global compliance teams on privacy related issue management.
Awareness: Maintain awareness of global privacy laws and regulations, and proactively advise Medidata’s business teams on the impact of developments in the law.
Regulatory Affairs: Engage and support Medidata’s leadership in privacy-focused industry groups.

Posted Dec. 09, 2024

Generac – Corporate Counsel – Regulatory & Data Privacy

Responsibilities:

Provide actionable, risk-based advice on global product and data privacy regulation
Develop and implement policies and processes to champion best practices and product and data privacy regulatory compliance
Direct and oversee outside counsel in matters of product regulation and data privacy
Partner with other members of the Legal Department, and business and functional team, to provide strategic, business-oriented legal guidance to aid the successful execution of initiatives
Perform other responsibilities as assigned

Posted Dec. 06, 2024

The PeterSan Group – Senior Counsel, Data Privacy

Responsibilities:

Create and drive risk-based enterprise-wide data privacy strategy to help ensure appropriate collection, handling and use of data.
Support in negotiation of privacy, information security and compliance terms in technology, vendor, and service provider contracts.
Conduct privacy impact analyses, risk assessments and due diligence for existing and new third parties to address privacy and corporate compliance risks and legal requirements.
Advise and collaborate with data analytics, information security and business teams on artificial intelligence (AI) governance, use and risk mitigation.
Monitor and assess legislative, regulatory, and enforcement developments in privacy law and corporate compliance matters globally.
Lead California (CCPA/CPRA) and other US state privacy law compliance efforts, including analyzing applicability of relevant statutes to certain third parties.
Partner with the information security team on handling data security incidents/events.

Posted Dec. 04, 2024

JW Michaels & Co. – Senior Counsel – Privacy

Responsibilities:

Analyze existing privacy processes and proposed new processes to ensure compliance with applicable laws and modify/improve processes to conform to existing law;
Collaborate with IT and other internal stakeholders to implement new and revised privacy processes (e.g., re privacy rights requests, opt outs, etc.) with respect to consumers, employees and vendors;
Be able to answer internal and external privacy-related questions and inquiries;
Assume responsibility for managing and updating our PI data catalog;
Review existing contracts, and draft and negotiate new contracts, for privacy compliance;
Monitor and summarize new and evolving privacy laws, both in the U.S. and Canada;
Manage and update internal and external privacy policies, notices, and procedures;
Provide expert legal advice on privacy, cybersecurity, data use, and technology matters
Advise on data, cyber, and privacy-related issues in M&A transactions;
Conduct privacy impact assessments for proposed rules or systems;
Provide privacy trainings, as needed;
Understand adtech, cookies, online trackers, etc.;
Assess potential privacy/cybersecurity risks;
Be familiar with data breach laws.

Posted Dec. 04, 2024

Affirm – Senior Counsel, Privacy

Responsibilities:

Provide pragmatic advice and guidance on privacy and security matters in the U.S. and Canada.
Maintain and elevate Affirm’s privacy policies, playbooks and processes to enable Affirm to continue scaling globally.
Work with teams across Affirm to help drive a global data protection program and governance structure consistent with relevant laws and regulations
Partner closely with cross-functional teams to ensure that privacy is built into the design of new products, features, and business initiatives.
Partner with the commercial and vendor legal teams to ensure appropriate data protection provisions are incorporated into vendor, partner, and merchant agreements.

Posted Dec. 03, 2024

ACLU – Algorithmic Justice Fellow

Responsibilities:

Develop and apply quantitative methods to evaluate automated systems, including systems leveraging artificial intelligence (AI), used for decision-making in areas like hiring, housing, and credit to assess and quantify their impact on marginalized communities.
Contribute to all aspects of quantitative and qualitative evaluations of automated systems, including study design, literature reviews, project management, and writing for outputs including academic publications, whitepapers, and policy briefs
Collaborate closely with other ACLU team members – including ACLU attorneys, policy counsels, data scientists, engineers, and other technologists – as well as with partner organizations and academic researchers on investigations for litigation, public-facing reports, academic publications, and data analyses
Review and analyze patterns in local, state and federal policies and legislation regulating artificial intelligence using both manual and automated tools, such as applying natural language processing (NLP) techniques to the analysis of legislative text
Support the legal analytics team on other high-priority civil rights cases, including disparate impact claims in criminal justice, housing, or employment
Center principles of equity, inclusion, and belonging in all work, embedding the values in program development, policy application, and organizational practices and processes

Posted Dec. 01, 2024

Sigma Computing – Corporate Counsel – Privacy

Responsibilities:

Assist with integrating privacy, risk, and compliance into our business processes, operations, and product development.
Assist with creating and maintaining privacy documentation like notices, data retention schedules, impact assessments, and more.
Support our sales and procurement teams by drafting, reviewing, and negotiating privacy-focused agreements (e.g. DPA’s, and BAA’s).
Assist the GRC team with managing vendor relationships and subprocessors, creating policies and processes to protect sensitive data.
Support response to data incidents, including identifying legal obligations, and preparing incident notices and other communications.
Stay current on evolving privacy laws like HIPAA, CCPA, GDPR, and provide practical guidance to internal teams.
Provide sound, practical advice and guidance on legal and business-related issues to internal clients.

Posted: Nov. 30 2024

Jobot – Partner – Technology, Privacy & Data Security Attorney

Responsibilities:

Advise clients on data security and privacy compliance.
Draft privacy and data security-related policies and agreements.
Draft and negotiate privacy (including DPAs), advertising, online advertising and/or technology contracts.

Posted: Nov. 29 2024

Airbnb – Senior Counsel, Privacy

Responsibilities:

Monitor, stay up-to-date, and advise on legal and regulatory requirements related to data privacy and support associated compliance strategies, including with respect to U.S. and other global privacy laws.
Provide advice and counsel to the Privacy Operations team on the implementation of global privacy compliance requirements related to data subject request process and escalations, and other data governance and data lifecycle management projects.
Collaborate with international privacy counsels to provide focused and pragmatic advice on the implementation and impact of global privacy laws.
Collaborate with legal colleagues responsible for strategy around our interactions with data protection authorities to ensure that regulatory requirements are properly incorporated into our business and compliance processes.
Provide support on a wide variety of privacy issues related to international data transfers, data sharing, third-party privacy risk management, insurance, electronic communications, and marketing such as consent requirements and cookie compliance.
Collaborate effectively to ensure regional privacy and cybersecurity legal advice on requirements and regulatory frameworks in the US, EMEA, APAC and LATAM are harmonized and effectively integrated into Airbnb’s global compliance frameworks.

Posted: Nov. 28 2024

Booking Holdings – Senior Privacy & Cybersecurity Counsel

Responsibilities:

Privacy and Cybersecurity Legal Counsel: Provide expert advice on global privacy laws, cybersecurity regulations, and compliance strategies to align with business priorities. Support incident response, including regulatory notifications and stakeholder communications. Counsel on privacy and cybersecurity aspects of mergers and acquisitions, including due diligence and post-integration. Develop and oversee incident response policies and procedures.
Regulatory and Program Development: Monitor and assess global regulatory developments to shape compliance strategies for U.S. and international data privacy, personal information, and cybersecurity standards. Coordinate multi-jurisdictional regulatory assessments with regional counsel. Lead the creation and maintenance of privacy notices, internal policies, incident playbooks, and other program materials.
Contracts and Risk Management: Negotiate vendor and third-party contracts, ensuring strong data protection terms. Provide expertise on privacy-by-design, privacy impact assessments, and data protection reviews. Support compliance with public disclosure requirements, including SEC filings and other regulatory obligations.
Leadership and Governance: Act as a trusted advisor to brand privacy leaders, procurement teams, marketing, and business stakeholders. Foster cross-functional collaboration to integrate privacy and cybersecurity considerations into business processes and technology initiatives. Partner with business leaders to align privacy and cybersecurity efforts with organizational objectives.

Posted: Nov. 27 2024

FanDuel – Counsel Manager, Privacy and Data Security

Responsibilities:

We are seeking a talented privacy attorney to join our Legal and Compliance team, reporting directly to our Director of Privacy and Data Security. You will be an integral part of a highly collaborative team, interacting closely with various stakeholders across the organization. In this role, you will provide critical privacy legal advice to the business, including on new state privacy laws, artificial intelligence, commercial and service provider agreements, and data breach incident response matters.

Posted: Nov. 26 2024

AWS – Associate Corporate Counsel, AWS Legal

Responsibilities:

In this role you will work on a broad range of issues, including data privacy and data governance, product development, licensing, marketing compliance, and generative AI. You will advise on the development of new tools and resources, analyze compliance considerations and help the business action solutions, vet new initiatives and support them through launch, and implement solutions that help our teams scale and simplify. The role will also involve some drafting of strategic vendor engagements and customer agreements, and managing outside counsel.

Posted: Nov. 25 2024

Vuori – Privacy Counsel

Responsibilities:

Partner with the VP, Associate General Counsel- Commercial & Privacy to develop, evolve and scale Vuori’s Privacy Program.
Develop the strategic framework and approach for technology-related projects and contracts
Draft, review, negotiate, and complete technology agreements and related documents.
Manage risks, mitigation strategies, regulatory and contractual compliance, and assist with operational matters.
Define, develop, maintain, and implement policies and processes for effective privacy practices.
In collaboration with Vuori’s Privacy Manger, evaluate projects involving personal data, conduct privacy impact assessments, and develop risk mitigation strategies.
Handle escalations of Data Subject Access Requests and address fulfillment challenges with stakeholders.
Identify and operationalize requirements of applicable data protection laws and regulations.
Train and guide business teams on the use of privacy impact assessments (PIA’s), Data Protection Addenda and similar templates, relevant legal issues, processes, and good contracting practices
Coordinate with outside counsel in EU, UK, and China for proper data processing and transfer and overall compliance with relevant laws.
Collaborate with Information Security to ensure alignment between security and privacy compliance programs.
Develop and provide privacy training to the workforce in collaboration with the Privacy Manager.
Maintain current knowledge of applicable global, federal, and state privacy laws and accreditation standards.
Collaborate with security and incident response team members on potential incidents related to personal information.
Assist in other duties as needed and directed.

Posted: Nov. 25 2024

Jobot – Cybersecurity and Data Privacy Attorney

Responsibilities:

Providing expert legal advice on a wide range of cybersecurity and data privacy matters, including data breach responses, data protection compliance, and privacy policy development.
Managing and coordinating responses to data breaches and other security incidents, including conducting investigations, liaising with relevant authorities, and advising on notification obligations.
Drafting, reviewing, and negotiating contracts and other legal documents related to data privacy and cybersecurity, including data processing agreements, data transfer agreements, and privacy policies.
Keeping abreast of developments in cybersecurity and data privacy law, and advising the company on potential impacts and compliance requirements.
Training and advising staff on data privacy and cybersecurity issues, and developing and implementing company-wide policies and procedures to ensure compliance with applicable laws and regulations.
Representing the company in legal proceedings related to data privacy and cybersecurity issues, including litigation, regulatory investigations, and audits.

Posted: Nov. 25 2024

Wabtec Corporation – Director, Privacy Counsel

Responsibilities:

Develop and implement data privacy policies and procedures in accordance with relevant laws and regulations and industry best practices.
Collaborate with cross-functional teams, including HR, IT, and legal, to ensure a unified approach to data privacy.
Provide legal support to business units on all aspects of contract law with particular emphasis on privacy and cyber security requirements, to negotiate data processing agreements, and other privacy-related agreements.
Conduct data privacy impact assessments (DPIA) and regularly review and update risk assessments to identify and mitigate data protection risks.
Monitor relevant privacy and data protection laws and enforcement activities to ensure ongoing compliance, track emerging risks and assist with policy creation and other program materials.
Serve as a point of contact for data privacy inquiries and requests from employees and external parties.
Collaborate with third-party vendors to ensure their compliance with data privacy regulations.
Educate and train employees on data privacy, information security, cybersecurity risks, and data protection principles and practices, in order to foster a culture of security and privacy within Wabtec.
Advise business units in assessing and responding to data privacy risks related to relevant functions.
Work with IT to develop and implement an information security framework for computer networks and data, including cybersecurity measures and response protocols.
Lead the Legal response to data breaches, including investigation, mitigation, notification, and remediation.

Posted: Nov. 25 2024

Couchbase – Legal Counsel, Privacy

Responsibilities:

Managing, advising on, and executing all tasks related to privacy compliance matters in collaboration with the privacy and product legal team and other functions, e.g. data protection impact assessments, data subject access requests, privacy compliance requirements under relevant privacy frameworks and regulations (e.g. GDPR, CCPA, HIPAA, etc.), data mapping and data flows tracking, compliant usage of online tracking technologies, etc.
Negotiating, and enabling the go-to-market legal team to negotiate, data processing agreements (DPAs), business associate agreements (BAAs) and other similar agreements with customers, partners and vendors to support Couchbase’s compliance obligations.
Maintaining and elevating Couchbase’s privacy policies and processes, privacy templates (e.g. DPAs, BAAs, and other similar agreements), as well as privacy playbooks and legal processes to enable Couchbase to continue scaling globally.
Driving and contributing to cross-functional and organization-wide privacy and security initiatives, such as privacy and security certification audits, compliance audits and process reviews, employee privacy enablement and education regarding company privacy policies and practices.
Drafting and negotiating a wide range of technology agreements, such as large-scale enterprise software license agreements, technology partner agreements, nondisclosure agreements, etc.

Posted: Nov. 25 2024

Credit Karma – Privacy Counsel

Responsibilities:

Help to ensure Credit Karma’s compliance with state and federal privacy laws, such as the California Consumer Privacy Act and Gramm Leach Bliley Act, through program and process development and management
Review and provide feedback on privacy and security terms in commercial agreements, in partnership with Credit Karma’s commercial counsel
Proactively assess how evolving privacy and data security requirements apply to new and innovative financial services products and other technologies
Provide actionable, business-savvy counseling to business stakeholders related to privacy and data security
Assist with consumer and regulatory inquiries and escalations related to privacy and security, and conduct Data Privacy Impact Assessments (DPIA)
Assist with complex cross-functional efforts related to privacy and cybersecurity, including site and security incident response
Help to manage, develop, and mature a privacy program across the entire company, including developing and implementing processes and policies
Educate stakeholders in a simple, easy to understand way about privacy and data security issues and innovating on ways to continue fostering a culture of learning
Stay up-to-date on new and evolving regulatory requirements related to privacy and data security

Posted: Nov. 25 2024

National Basketball Association (NBA) – Senior Associate Counsel, Privacy

Responsibilities:

Support the development and implementation of the NBA’s privacy compliance program and provide legal advice related to the NBA’s data governance framework. This includes working with senior leadership and other internal constituents across the organization regarding the management and/or use of data and helping to develop and implement privacy-related policies in compliance with applicable laws and regulations.
Work with senior leadership and other internal constituents to develop the processes and agreements needed to accomplish the NBA’s goals related to the use of data in compliance with applicable laws and regulations.
Negotiate and draft data processing, services, technology, and operator agreements with third-party providers.
Assist other members of the Legal Department to negotiate and draft data-related provisions of commercial and other agreements.
Support the NBA’s Marketing Department by drafting and negotiating agreements and advising on initiatives related to the promotion of the NBA and its affiliated leagues.
Perform special projects and other assignments as requested by the Legal Department’s senior leadership team.

Posted: Nov. 21 2024

OpenAI – Litigation Counsel

Responsibilities:

Provide legal advice and counsel on a wide range of litigation and regulatory matters, including commercial disputes, intellectual property litigation, and regulatory investigations and enforcement actions.
Manage and oversee outside counsel in all aspects of litigation and regulatory matters, including discovery, motion practice, trial preparation, and settlement negotiations.
Stay current on relevant laws, regulations, and industry trends, and provide updates and legal guidance to company leadership and stakeholders.
Collaborate with cross-functional teams to gather relevant information, assess risk, and develop legal strategies to resolve disputes.

Posted: Nov. 20 2024

California Privacy Protection Agency – Executive Director

The Executive Director is the principal staff officer of the Agency. As an appointee of the Board, the Executive Director will serve at the pleasure of the Board and perform duties as assigned by the Board. Under the direction of the Board, the Executive Director is delegated the authority to oversee daily operations and activities of the Agency.

Posted: Nov. 2024 (applications due by Dec 6)

TikTok – Senior Litigation Counsel, Global Legal

Responsibilities:

Handle general litigation, pre-litigation claims, and all related matters.
Manage all aspects of litigation matters including e-discovery, fact-finding and analysis, witness preparation, depositions, case management conferences, motion practice, and arbitration or trial preparation and presentation.
Supervise and partner with outside counsel to ensure that all aspects of the company’s legal representation are of the highest quality, including the day-to-day running of matters, overall strategy, written work, and oral advocacy.
Identify potential litigation risk and counsel the business to minimize exposure.
Support the company’s strategy for litigation and pre-litigation disputes.

Posted: Nov. 18, 2024

Adobe – Senior Privacy Counsel

Join Adobe’s Privacy Office and Cybersecurity Legal Team (POCL) in a role focused on privacy issues arising in public policy, regulatory inquiries, and litigation. You’ll work closely with colleagues across the world on groundbreaking privacy questions at the forefront of new and innovative technologies. Bring your passion for privacy and your best ideas!

Posted: Nov. 15, 2024

Meta – Associate General Counsel, AI Partnerships

Meta is seeking a talented technology transactions attorney to work on our Artificial Intelligence (AI) Partnerships legal team. This role’s primary function is to support a broad range of technology transactions focused on Meta’s AI research, products and services. An ideal candidate for this role will have a solid understanding of technology transactions, AI, and a passion for structuring cutting edge technology deals. The candidate must be a clear communicator and able to collaborate with a range of cross-functional teams. You will join a growing team of technology deal lawyers working in a fast-paced and exciting realm. The specific areas of focus and responsibilities will change based on company priorities, new legal issues and the regulatory and competitive ecosystem.

Posted: Nov. 14, 2024

Google – Investigations Counsel

Responsibilities

Lead and manage internal investigations into allegations of potential legal, regulatory, or policy violations related to business ethics, financial integrity, workforce conduct, or insider data security incidents.
Provide legal advice on risk internal investigations and data security incidents.
Partner with cross-functional teams to address legal and regulatory investigations.

Posted: Nov. 14, 2024

FUJIFILM Holdings America Corp – Senior Counsel, Data Privacy & Protection

FujiFilm Holdings America Corporation is seeking a senior counsel to support the company’s privacy program goals and compliance obligations across a number of business functions. In this role, you will report to the company’s Chief Litigation, Employment & Privacy Counsel, and will work closely with the Privacy Officer, Security Officer and legal team to support the FujiFilm privacy and cybersecurity programs. You will serve as a subject-matter expert for state, federal and international privacy laws impacting FujiFilm, and be responsible for providing legal advice and counsel on such laws and regulations affecting its businesses in the North America, South America, and European regions.

Posted: Nov. 14, 2024

Databricks – Senior Legal Counsel – Privacy

Databricks is seeking a Privacy Legal Counsel to help the Databricks legal team navigate rapidly evolving global privacy laws and regulations. You will report to the Legal Director of Privacy in building out our privacy team. As a member of the Privacy team, you will provide legal counsel to several business partners as well as help support the privacy compliance program for Databricks.

Posted: Nov. 14, 2024

Google – Associate Regulatory Counsel, Privacy

Responsibilities

Interpret laws and other compliance obligations and advise Compliance, Business, Product, and Engineering teams on requirements.
Provide legal advice on compliance programs and policies to help mitigate risk.
Manage government and regulator discussions, negotiations, and disclosures on compliance readiness efforts.

Posted: Nov. 13, 2024 (open until at least Nov. 20)

Google – Regulatory and Litigation Associate Counsel, Privacy

Responsibilities

Lead responses to regulatory inquiries, investigations, litigation, enforcement actions, and overlapping civil matters.
Oversee the collection and production of accurate information in external submissions and disclosures.
Provide legal advice on government and regulatory audits and exams.

Posted: Nov. 13, 2024 (open until at least Nov. 21)

Affirm – Senior Counsel, Privacy

Affirm is looking for a thoughtful, collaborative, and skilled privacy lawyer to join as Senior Counsel, Privacy, with primary responsibility for privacy legal matters in North America (U.S. and Canada). Reporting to the Director, IP and Privacy, you will be supporting a global privacy program and in a position to drive impact quickly. If you are nimble and enjoy working in a fast-paced environment, come join us in our mission to deliver honest financial products that improve lives!

Posted: Nov. 13, 2024

DoorDash – Senior Counsel, Privacy

DoorDash is hiring an experienced Senior Counsel, Privacy to help us build a best-in-class privacy program. This high visibility, high impact role will require close partnership with product, engineering, and business teams. In addition to building out our privacy program, you will counsel innovative products and services, advising on creative solutions that mitigate risk while unlocking business goals.

Posted: Nov. 12, 2024

Geico – Assistant General Counsel, Privacy and Information Law

GEICO is seeking an Assistant General Counsel, Privacy and Information Law to join our Legal Department. This position will focus primarily on privacy and data-protection law and will also work on cybersecurity and other information law related legal matters such as related technology, data and information use issues. The ideal candidate will possess a deep understanding of privacy, data-protection laws and technology and will be responsible for providing advice and guidance to Compliance and Risk, the CISO, legal colleagues and stakeholders throughout the company.

Posted: Nov. 12, 2024

Legal.io – Privacy Counsel

Legal.io is working with a leading tech company seeking an experienced Privacy Counsel for a 10 month contract. This is a fully remote position.

Responsibilities:

Provide expert legal advice on data protection and privacy issues, particularly in the SaaS industry.
Handle transactional matters, including data protection agreements and escalations from the commercial team.
Support the privacy program with programmatic work, including compliance and operations program oversight.
Manage rights and access under Data Protection Agreements (DPA) and vendor onboarding processes.
Conduct training and awareness sessions on privacy practices within the organization.
Work with cross-functional business partners to represent the privacy team in negotiations, advice, and counseling.
Oversee transactional programs, certifications, and work with outside counsel.
Provide advice on AI strategy, data governance, and incident response.

Posted: Nov. 12, 2024

Meta – Lead Counsel, Privacy

Meta is seeking a highly motivated privacy attorney to join a growing team of go-to legal counsel for teams building privacy products. We drive the development and execution of scalable solutions for all of Meta to comply with new and evolving privacy obligations across the globe.This requires strategic thinking, strong business acumen, and excellent legal judgment. You will need a deep understanding of global privacy laws and a passion for new technology. We are looking for someone who is able to both work independently and collaborate across functions, including Meta’s privacy, product, legal and policy teams.

Posted: Nov. 12, 2024

Reddit – Legal Director, Privacy

We are looking for a senior attorney to join our growing team and manage the legal team’s privacy compliance function. The successful candidate is passionate about privacy and even more passionate about process and scale! You love challenges, building and collaborating with internal teams to create best in class compliance programs in a fast moving environment.

Posted: Nov. 3, 2024

Privacy Law Job Listings

PRIVACY LAW JOB LISTINGS