Data Privacy, Cybersecurity & AI Associate

Greenberg Traurig LLP; San Francisco (CA); On-site; USD 180,000 - 260,000; Full time

Job summary

Greenberg Traurig LLP seeks an experienced privacy and cybersecurity attorney in San Francisco to advise clients on cutting-edge privacy, AI, and data protection issues.

You will help build privacy programs, draft notices, internal policies, incident response plans, and negotiate data-sharing agreements, while coordinating with cross-functional teams on regulatory investigations and due diligence.

Qualifications

• Expertise in U.S. federal and state privacy laws (CCPA, HIPAA) and GDPR.
• IAPP CIPP (U.S./EU) certification preferred; AIGP a plus.
• Experience advising on privacy, AI governance, and data security in corporate transactions.

Responsibilities

• Provide risk-based privacy, AI, and cybersecurity counseling.
• Draft and revise privacy notices, DPAs, and incident response plans.
• Lead privacy due diligence in M&A and regulatory responses.

Skills

Privacy Law

AI Governance

Cybersecurity

Regulatory Compliance

Due Diligence

Drafting Agreements

Job description

Overview

• Provide legal advice and risk-based evaluations on complex, cutting-edge privacy, AI, and cybersecurity issues.
• Assist companies in building or scaling privacy programs and provide compliance guidance for prevailing U.S. federal and state privacy laws, GDPR, and other global standards, including drafting and revising privacy notices, terms of service, incident response plans, information security policies, data protection policies, DPIAs, product counseling, and negotiating/drafting various commercial agreements involving data sharing (professional services, vendor/service provider, data processing, cross-border transfer).
• Develop and refine AI governance programs, draft internal/external AI policies, advise on client AI use cases (e.g., teleconference note-takers, GenAI, call recordings), perform AI risk assessments, advise on automated decision-making and profiling, and research AI legal developments.
• Respond to regulatory requests and formal investigations (e.g., FTC, CalPrivacy, state AG, ICO, OPC) regarding privacy compliance and data breaches, and drive data breach preparation, risk mitigation, coordination, and responses.
• Perform, lead, and negotiate all phases of privacy and security-related due diligence in mergers & acquisitions and similar fundamental corporate transactions.
• Requires working knowledge of CCPA, various other state comprehensive privacy laws, CIPA, HIPAA, FCRA, GLBA, TCPA, CAN-SPAM, COPPA, ROSCA, and GDPR.
• Must be familiar with the inner workings of the Internet, online tracking technologies, opt-in and opt-out standards, and have experience advising on "cookie" compliance based on business models and intended uses.
• Requires knowledge of privacy and AI regulatory compliance programs, with a proven record of starting or iterating such programs.
• IAPP CIPP (U.S. and EU) certification is strongly preferred, and AIGP is a plus.
• Additional consideration will be given for sector-specific experience in financial services, children’s privacy (e.g., AADC, age verification), telecom, biometrics, consumer health data, genetics, or digital advertising.