Senior Associate - Privacy and AI - Full Time

Enlightened Privacy, PC; Santa Cruz (CA); Remote; USD 160,000 - 180,000; Full time

Job summary

Enlightened Privacy, PC seeks a mid-level privacy attorney to join as Senior Associate–Privacy and AI Counsel in a fully remote role. You will research global privacy and AI laws, guide clients on compliance, and draft DPAs and notices.

The position offers a competitive base salary and growth within a boutique practice. Ideal candidate has 4+ years in data protection, J.D., and active California or relevant state bar membership.

Qualifications

• 4+ years of relevant legal experience in data protection and privacy.
• Diligent drafting of privacy policies and DPAs; strong writing ability.
• Experience with GDPR, CCPA, and US state privacy laws; AI legislation knowledge.

Responsibilities

• Research and analyze global data protection and AI laws at granular level.
• Provide practical guidance for compliance; explain nuances clearly.
• Draft and negotiate DPAs and privacy notices; prepare playbooks.

Skills

Privacy law

AI law

Client advisory

DPA drafting

Regulatory compliance

Legal research

Written communication

Cross-border privacy

Education

J.D. degree

Tools

OneTrust

Job description

Senior Associate–Privacy and AI Counsel (September 2026)

Reports to: EP’s founder and lead attorney, Jackie Wilkosz

Role Type: Full Time

Location: This is an all-virtual position with the possibility of in-person meetings if you’re located in the San Francisco Bay Area.

Compensation:
$160,000 - $180,000 depending on the successful candidate’s level of experience.

Enlightened Privacy, PC (“EP”) is a micro-boutique data protection, privacy and AI law practice poised to mature to the next level. To provide the highest level of service and build supportive and inspiring future offerings for our clients, we are looking to evolve and expand.

We are seeking a smart, talented mid-level privacy attorney to join our team in a full-time, W-2 role.

Role Responsibilities

• Research and analyze existing and emerging global data protection and AI laws and regulations, such as the CCPA, other US state privacy and AI laws, and the GDPR and EU AI Act, on a granular, as-applied level.
• Provide practical guidance to clients on compliance with applicable laws and regulations; understand and explain the nuances of legal requirements and associated risk and business implications in a clear, concise way that clients can operationalize.
• Draft and negotiate DPAs and advise clients on how to implement and negotiate them. Prepare and provide playbooks.
• Draft comprehensive global privacy notices (for customers, HR, and recruiting) and assist clients with implementation.
• Create compliance documentation for clients, such as records of processing activities and internal data protection policies and procedures.
• Independently lead and manage client projects, including coordinating deliverables, timelines, and client communications.
• Serve as a reliable point of contact for clients through calls, email, and written work product, escalating issues to EP’s Founder as appropriate.
• Draft and provide clear, actionable summaries of legal requirements, both for clients and internally.
• Compare legal requirements across different jurisdictions globally to understand and advise on similarities and differences.
• Collaborate with EP’s Founder on developing new projects, initiatives, resources, and client offerings. Work within EP's current and planned work standards, frameworks.
• Represent EP at appropriate networking events. Interest in speaking on relevant topics as a representative of EP.

Experience & Qualifications

• 4+ years of relevant legal experience, with proven meaningful experience in data protection and privacy at a large or mid-size law firm or in-house legal department. Both law firm and in-house experience is strongly preferred.
• J.D. degree from an ABA-approved law school and active membership in good standing with the California Bar or other relevant state bar.
• Strong working knowledge of and proven experience advising clients on key global data protection and privacy laws–GDPR, UK GDPR, CCPA, and US state privacy laws are must-haves. Experience with additional geographic areas (e.g., Brazil, Canada) is strongly preferred.
• Proven experience drafting privacy policies and DPAs.
• Proven experience drafting data governance documentation and written guidance for businesses on compliance with applicable laws and regulations.
• Knowledge of and experience with analyzing and applying recent AI legislation, such as the EU AI Act and US state legislation.
• Experience implementing and/or managing OneTrust or other CMP, privacy compliance or data governance tech tools.
• Knowledge of and experience with the NIST AI Risk Management Framework and ISO 42001.
• Understanding of and experience with data broker laws and data protection and privacy laws as applied to marketing and digital advertising.
• Experience with adtech compliance and implementing sale/sharing/targeted advertising opt-outs.
• Experience advising on CIPA compliance and managing and responding CIPA demands.
• Experience with fintech companies, financial privacy, or crypto space.
• Experience with children’s privacy laws, including COPPA, FERPA, age-appropriate design codes, and recent children’s and minors’ privacy legislation.
• Understanding of and experience with data breach laws and cybersecurity frameworks (e.g., SOC 2, NIST frameworks) and controls.

Skills & Attributes

• Excellent writing and analysis skills (impeccable grammar and spelling skills, drafting is an area of strength).
• Meticulous attention to detail.
• Excels at assessing and balancing risk and advising on practical, business-oriented solutions to compliance needs.
• Thinks logically and nimbly, seeing multiple different perspectives and approaches to a particular question.
• Self-starter who is able to work collaboratively, easily takes direction and asks the granular questions and is also comfortable working independently and exercising sound judgment while knowing when to seek input or elevate issues.
• Receptive to direction and feedback, curious, and excited to learn.
• Collaborative and creative with a sense of humor and penchant for having fun.
• Able to interact with clients directly and competently.
• Kind and mindful.
• Excited to be a key contributor in a young, small, and growing law practice.

About this Role

Work with/report to: This role reports to and works directly with EP’s Founder. The role also may coordinate with EP’s IT and business operations contractors.

Location: This role is fully remote. Candidates must be able to maintain reliable availability during Pacific Time business hours. Periodic in-person meetings may be possible if mutually convenient. Specific working-hour expectations will be discussed during the interview process.

Compensation: Target base salary is approximately $160,000-$180,000 annually, commensurate with experience and qualifications. Additional compensation or benefits commensurate with experience and qualifications.

Technology: EP will specify the technology, security, and equipment requirements applicable to the position.

About EP

Enlightened Privacy, PC is a woman-founded and woman-owned micro-boutique law practice focused on global data protection, privacy and AI data governance. We advise clients across industries, from tech and consumer products companies to startups and established public companies. We guide our clients on building and managing data protection and privacy compliance programs and advise on compliance with the GDPR and U.S. state privacy laws such as the CCPA, as well as AI legislation and governance requirements. We like to have fun and love to learn, and we also know how to rollup our sleeves and get down to business. Our ideal candidate does too!

The Selection Process

Our intention is to be as thoughtful and clear as possible in our assessment and selection process. Our goal is to use a straightforward, job-related selection process focused on the candidate’s relevant experience, writing, judgment, client-service skills, and ability to succeed in this role. EP is an equal opportunity employer. All applicants will be considered without regard to protected characteristics under applicable law.

Next Steps

Selected candidates will be invited to an initial interview.

Candidates who advance may be asked to complete a job-related writing exercise.

Finalists will be invited to a final-round interview.

Once we’ve received and reviewed your submission, we will reach out with information on next steps.