Cybersecurity & Data Privacy Associate

ArentFox Schiff; San Francisco (CA); On-site; USD 180,000 - 260,000; Full time

Job summary

ArentFox Schiff in San Francisco seeks an experienced privacy attorney to handle international, federal, and state privacy matters, including GDPR, CCPA, BIPA, HIPAA, and related statutes. You will draft and review privacy policies, data protection agreements, privacy and security clauses in contracts, perform DPIAs, and manage incident response and regulatory inquiries.

Travel domestically and abroad as needed; experience with adtech, privacy litigation, and AI regulation is a plus.

Job description

Overview

• Required experience includes international, federal, and state privacy laws, specifically GDPR, CCPA (and other state-level comprehensive laws), BIPA, CIPA, COPPA, FCRA, FERPA, the FTC Act, GLBA, HIPAA, and VPPA.
• The role involves preparing and reviewing privacy policies, data protection agreements, privacy and security provisions of contracts, privacy impact assessments, transactional privacy and security due diligence and agreement negotiations, incident response, and regulatory investigations.
• Experience with adtech, privacy litigation, and AI regulation is considered a plus.
• Flexibility for domestic and overseas travel is expected.