Data Privacy & AI Associate — Risk, Policy & Breach Response

Barnes & Thornburg LLP; Morristown (NJ); On-site; USD 150,000 - 200,000; Full time

Job summary

Barnes & Thornburg LLP is seeking a Data Privacy and AI Associate in Morristown, NJ. The role focuses on privacy counseling, drafting data retention policies, DPAs, incident response plans, breach notifications, and related data governance.

Ideal candidates have 1–3 years of data privacy experience, demonstrated interest in the field (CIPP preferred), some AI exposure, strong academic credentials, and are admitted or eligible to waive into the local bar.

Qualifications

• Should ideally have at least one year of data privacy, data protection and/or data security experience
• Must have a demonstrated interest in the field, including CIPP certification
• Ideally will have some AI experience
• Ideally will have some experience with incident response and data breach matters
• Must have a solid academic record, strong legal research and writing skills, and keen attention to detail
• Must have strong interpersonal skills, a strong work ethic, and show initiative
• Must be active and admitted to the local state bar or eligible to waive in

Responsibilities

• Provide privacy counseling and guidance to clients
• Review and draft data retention policies and data processing agreements
• Develop and review incident response plans and incident reports
• Assist with data breach response matters and notifications
• Advise on AI matters and monitor evolving privacy laws and cybersecurity regulations

Skills

Data privacy

Data protection

Data security

AI experience

Incident response

Data breach experience

Legal research

Legal writing

Privacy counseling

Interpersonal skills

Work ethic

Initiative

Education

CIPP certification

Bar admission (active or eligible to waive in)

Strong academic record

Job description

Barnes & Thornburg LLP is seeking a Data Privacy and AI Associate in Morristown, NJ. The role focuses on privacy counseling, drafting data retention policies, DPAs, incident response plans, breach notifications, and related data governance.

Ideal candidates have 1–3 years of data privacy experience, demonstrated interest in the field (CIPP preferred), some AI exposure, strong academic credentials, and are admitted or eligible to waive into the local bar.