Data Privacy, Cybersecurity & AI Attorney

About the role

Greenberg Traurig (GT), a global law firm, is seeking a highly motivated, business-minded attorney with 3-6 years of experience to join the Data Privacy & Cybersecurity Practice of our San Francisco team as an Associate.

Responsibilities

• Assisting companies with building or scaling privacy programs, as well as providing compliance guidance in relation to prevailing U.S. federal and state privacy laws, and the GDPR and other global privacy standards and regulations.
• Drafting and revising privacy notices, terms of service, incident response plans, information security policies and other data protection policies.
• Providing strategic advice in relation to the use of tracking technologies and advising on CIPA demands;
• Preparing DPIAs, and providing product counseling;
• Negotiating and drafting professional services agreements, vendor/service provider agreements, data processing agreements, cross-border transfer agreements, and other types of commercial agreements involving data sharing.
• Developing and refining AI governance programs, including through drafting internal/external AI policies; advising on clients’ use of AI with their customers (e.g., teleconference note-takers, GenAI, call recordings); performing AI risk assessments; advising on automated decision-making and profiling; and researching and advising on AI legal developments.
• Responding to regulatory requests and formal investigations (e.g., FTC, CalPrivacy, state AG, ICO, OPC) in relation to privacy compliance and data breaches.
• Performing, leading and negotiating all phases of privacy and security-related due diligence in mergers & acquisitions and similar fundamental corporate transactions.
• Driving data breach preparation, risk mitigation, coordination and responses.

Qualifications

• J.D. from an accredited law school, and in good standing with the California State Bar.
• 3+ years of legal experience, including substantive data privacy experience and an in-depth knowledge of U.S. and EU privacy and AI laws.
• Prior law firm experience.
• Strong professional judgment, excellent communication skills, a willingness to self-educate, and the ability to manage multiple tasks and supervise junior attorneys to ensure deadlines are met.

What We Are Looking For

A practical problem-solver with a demonstrated ability to counsel sophisticated businesses on complex privacy, data and AI issues with superior writing and communication skills. Comfortable navigating regulatory ambiguity, and translating legal requirements into actionable advice. Have a working knowledge of the CCPA, the various other state comprehensive privacy laws, CIPA, HIPAA, FCRA, GLBA, TCPA, CAN-SPAM, COPPA, ROSCA, and GDPR. Additional consideration will be given for sector-specific experience in financial services, children’s privacy (e.g., AADC, age verification), telecom, biometrics, consumer health data, genetics or digital advertising.