Sr Counsel Data Privacy & Protection

About the role

Fujifilm Holdings America Corporation is seeking a senior counsel to support the company’s privacy, data protection, and AI program goals and compliance obligations across multiple business functions. In this role, you will report to the Chief Litigation, Employment & Privacy Counsel and work closely with the Privacy Officer, Data Governance Director, Information Security Officer, and legal team to advance Fujifilm’s privacy, AI, and cybersecurity programs.

You will serve as a subject-matter expert on state, federal, and international privacy laws impacting Fujifilm’s diverse businesses—ranging from manufacturing to healthcare and life sciences—across North America, South America, and Europe. The position is fully remote within the U.S.

Responsibilities

• Act as a key subject-matter expert and advisor to Fujifilm attorneys and business teams on data privacy and protection law, providing practical, timely, strategic, and high-quality legal advice.
• Advise legal and business teams on best practices and compliance with U.S. and global data protection laws, including legal and regulatory aspects of data collection, privacy disclosures, consent forms, and related issues.
• Collaborate with privacy and security colleagues to support and enhance the company’s privacy program, enabling consistent, effective data privacy practices and minimizing risk.
• Support privacy impact assessments (PIAs/DPIAs), vendor risk reviews, and internal assessments using current data mapping and inventory information.
• Support the development and management of privacy training and awareness initiatives to educate employees on privacy obligations, data handling, and regulatory requirements.
• Provide legal support for reviewing, drafting, and negotiating AI, privacy, and data security terms in contracts with business partners and vendors, including data processing agreements and data protection terms.
• Draft, review, and negotiate AI, privacy, and security-related agreements, including Business Associate Agreements, Data Processing Agreements, Data Protection Agreements, and Security Agreements.
• Provide advice and legal direction on data protection laws impacting business operations and contractual relationships.
• Strategically advise on emerging products and technologies while anticipating and navigating privacy considerations.
• Provide legal counsel on investigations involving unauthorized access, loss, or disclosure of personal data, including advising on potential liability, legal obligations, and incident response efforts.
• Support development of enterprise-wide best practices for incident response readiness and advise on all aspects of incident response, whether privacy or cybersecurity-related.
• Identify and advise on key legal issues requiring attention from the privacy compliance team and anticipate potential privacy legal issues within the organization.
• Provide legal counsel to Information Security, Compliance, and other individuals with privacy and data handling responsibilities to help set strategy and manage complex privacy matters.
• Support the organization’s AI governance and responsible use framework, ensuring alignment with applicable privacy, data protection, and ethical use standards.
• Monitor emerging AI-related privacy and data protection regulatory developments (e.g., U.S. state laws, GDPR-adjacent obligations) and escalate impacts to leadership as needed.
• Partner with Compliance, Data Governance, IS, IT, and business stakeholders to assess privacy risks associated with AI and automated decision-making systems.
• Support HIPAA Privacy compliance obligations, including incident response and regulatory alignment.

Requirements

• JD degree and U.S. state bar membership in good standing.
• At least 8–12 years of experience as a practicing attorney, in-house and/or at a law firm, including at least 5–10 years of direct, hands-on experience providing legal counseling on data privacy and security matters.
• Understanding of relevant privacy statutes, regulations, and guidance, such as comprehensive state privacy laws (e.g., CPRA, VDCPA), California Confidentiality of Medical Information Act (CMIA), state breach notification laws, HIPAA, EU General Data Protection Regulation (GDPR), TCPA, and CAN-SPAM.
• Substantial experience assessing legal risks relating to data protection, privacy, and AI, and identifying and advising on practical, compliant ways to mitigate those risks.
• Experience drafting and negotiating AI, privacy, and security-related contracts and contract provisions.
• Experience with data loss prevention and cybersecurity events, including forensic investigations, breach notifications, and cybersecurity preparedness.
• Experience managing privacy and/or cybersecurity incident response efforts.
• Excellent negotiation and communication skills (both oral and written).

Preferred Qualifications

• Privacy and AI certifications (e.g., CIPP-US, CIPP-C, CIPP-E, CIPM, AIGP, CHPC, or other healthcare industry-related credentials).
• Experience and interest in new and emerging technologies, particularly in healthcare and life sciences.
• Strong organization and teamwork skills, ability to multitask, prioritize, take initiative, and lead projects.
• Detail-oriented, self-motivated, and able to motivate others.
• Experience with privacy litigation and enforcement actions.
• A strong commitment to integrity, professionalism, and demonstrated passion for excellence.

Benefits

• Medical, dental, and vision insurance.
• Life insurance.
• 401k retirement plan.
• Paid time off.

Pay

$175,000–$205,500 depending on experience.