Data Privacy, Cybersecurity, and AI Associate

Husch Blackwell LLP; Washington (District of Columbia); On-site; USD 150,000 - 230,000; Full time

Job summary

Husch Blackwell LLP in Washington, DC seeks an associate to lead privacy, cybersecurity, and AI workstreams for technology clients. You will handle GDPR, CCPA, and state privacy law matters, draft governance documents, and support regulatory inquiries.

The role emphasizes ownership of significant client workstreams, collaboration with counsel, and the development of AI governance programs within a leading national practice.

Qualifications

• Experience advising on privacy, cybersecurity, and AI matters.
• Incidence response and regulatory investigations experience preferred.
• Strong understanding of GDPR, CCPA, and U.S. state privacy laws.

Responsibilities

• Advise on comprehensive privacy, cybersecurity, and AI governance issues.
• Draft and review data processing agreements and DPIAs.
• Develop AI governance programs and related contract terms.
• Support incident response planning and regulatory inquiries.

Skills

Privacy law

Cybersecurity

AI governance

Client management

Regulatory investigations

Education

Juris Doctor (J.D.)

Tools

CoCounsel

Harvey

Legora

Job description

Overview

• The practice advises leading companies in technology, life sciences, healthcare, financial services, retail, and media on complex privacy, cybersecurity, and AI issues. The practice encompasses compliance counseling, product and digital marketing advice, commercial and transactional support, incident response, and regulatory investigations.
• The role involves taking ownership of significant workstreams and working directly with clients.
• Work includes privacy compliance counseling on GDPR, CCPA, other U.S. state comprehensive privacy laws, and industry/sector-specific laws (e.g., consumer health data, data broker registration and compliance laws).
• Responsibilities include building privacy and cybersecurity compliance programs, including drafting and operationalizing online privacy notices, internal policies, data processing agreements, transfer impact assessments, DPIAs, and risk assessments.
• The associate will design and operationalize intake, verification, and response workflows for consumer rights requests (access, deletion, correction, opt-out, and authorized agent requests).
• The role involves advising on AI governance programs, emerging AI and automated decisionmaking technology (ADMT) laws/regulations, the deployment of AI tools, the use of personal data to train AI models, and AI-related contract terms.
• The associate supports data security incident response, including fact gathering, legal analysis, and multi-jurisdictional notification obligations, and assists clients with incident response plans and tabletop exercises.
• Advice on ad tech compliance and digital marketing strategies that balance state law compliance with litigation risk management is also provided.
• The role includes supporting the privacy, cybersecurity, and AI aspects of M&A, financings, and commercial/technology transactions, including diligence, deal terms, data processing agreements, and data transfer mechanisms.
• Assistance with inquiries and investigations by state and federal regulators is required.
• Preferred qualifications include experience with incident response, AI governance, or the privacy aspects of transactions.
• One or more CIPP/US, CIPP/E, CIPM, CIPT, or AIGP certifications are strongly preferred.
• Familiarity using generative AI legal research and drafting platforms (e.g., CoCounsel, Harvey, Legora) in a legal practice setting, including an understanding of their appropriate use and limitations, is expected.