Data Protection - Associate

Lakshmikumaran and Sridharan attorneys; Hyderabad; On-site; INR 600,000 - 1,000,000; Full time

Job summary

Lakshmikumaran and Sridharan Attorneys seeks a Privacy Law Professional to guide clients through India's data privacy regime and EU GDPR considerations.

You will draft and review contracts, policies, and data protection documentation, advise on GDPR/DPDP, perform DPIAs, and support vendor management and regulatory liaison.

Qualifications

• Strong understanding of data protection laws and privacy frameworks.
• Experience drafting and reviewing legal documents related to technology and data.
• Familiarity with GDPR, DPDP Act, and cross-border data transfers.

Responsibilities

• Draft and review contracts, policies, and documentation relating to technology, data protection and related topics.
• Prepare legal opinions, memoranda, and notes under data protection, technology, and corporate law.
• Assist in due diligence on technology, IP, and data protection matters.
• Conduct privacy compliance activities and monitor relevant privacy laws and standards.
• Advise on Data Subject Rights platforms, DPIAs, and vendor management.
• Engage in regulatory liaison as required.

Skills

Privacy law

Data protection

GDPR knowledge

Contract drafting

Education

Law degree from a known law school

Job description

We are seeking a highly skilled and experienced Privacy Law Professional to join our legal team. As a privacy expert in LKS, your role will include guiding clients through the intricacies of data privacy laws of India and other prominent jurisdictions such as the EU (GDPR). You'll work closely with our technical and legal teams, offering insights and recommendations on GDPR, user consent management, and other data protection practices.

Key Responsibilities:

• Drafting and review of contracts and commercial agreements, policies, and other documentation in relation to technology, media, data protection and related aspects;
• Drafting of legal opinions, memorandum, notes and other documentation in light of data protection, technology, corporate and related laws and regulations;
• Assistance in legal due diligence assignments including those pertaining to material contracts, technology, intellectual property, data protection and related aspects; and
• Conducting Privacy Compliance which would include monitoring and ensuring compliance with all relevant privacy laws, regulations, and standards, such as DPDP Act, GDPR, CCPA, and/or HIPAA. Other activities that may be required include:
• Conducting Data Protection Impact Assessments
• Architecting and advising on platforms for implementing Data Subject Rights
• Privacy Training
• Advisory and Guidance relating to Vendor Management
• Regulatory liaison when required

Desired Skills and Competencies:

• Excellent written and verbal communication skills.
• Ability to work independently and as part of a team.
• Detail-oriented with a high degree of accuracy.
• Proactive and results-driven with strong problem-solving skills.
• Ability to work in a fast-paced environment and meet tight deadlines.
• High level of professionalism and confidentiality.

Experience and Education:

Education:

• Law Graduate from a known Law School with a strong academic track record

Experience:

• The ideal candidate should have a strong background in privacy and data protection law, with 0-2 years of relevant experience
• Experience in advisories/projects/cases in relation Information Technology Laws and Data Protection & Privacy laws (India and abroad)
• Has a good command over compliances required to be undertaken before and in the eventuality of data breaches or privacy incidents.
• Has working knowledge of global privacy laws and frameworks such as GDPR, CCPA, PDPA, etc.
• Has experience in drafting, reviewing, and negotiating commercial contracts, service agreements, SaaS agreements, data transfer agreements or other similar contracts.
• Has experience in drafting and reviewing privacy policies and procedures, terms of use, consent forms for specific data points, data retention agreements and other documentations required under the data protection framework in India and in other jurisdictions.
• Experience in conducting privacy risk assessments in corporate restructuring transactions and checking data protection compliances in organizations.
• Data protection certifications like CIPP(E), CIPP(A), CIPM, ISO: 27001 data auditors, etc. is strongly preferred, but not required.
• Experience in advising clients on sector specific data protection regulations in India like e-commerce, health, banking and finance sectors, among others, is also preferred. Exposure and experience in matters relating to Intermediary Guidelines, issues pertaining to the Aadhaar Act, or other related technology laws is also desirable