Description:

Who We're Looking For - Data Privacy Counsel
An Award-Winning Digital Marketing, Sales Conversion Company is looking for a Data Privacy Counsel to join the Legal team, reporting directly to the General Counsel. You will be part of a growing Legal and Compliance team and will be integral in building and supporting the next growth phase of the company. To be successful in the role, you must be motivated, a problem solver, serious about attention to detail, and want to be involved in all facets of Clearlink's business. This position will be hybrid at Clearlink's new Global Headquarters in Draper, UT; 4 days in office and 1 day remote. This position is only open to all current Utah residents who are willing to work in our world-class Headquarters in Draper, UT.

The Data Privacy Counsel will be responsible for overseeing all aspects of data privacy and protection within the organization. This includes developing and maintaining data privacy policies and procedures, providing guidance on data protection practices, conducting privacy assessments and audits, and serving as the primary point of contact for data privacy inquiries and concerns. The ideal candidate will have a strong background in data privacy and consumer protection laws and regulations (including the CCPA, GDPR, and TCPA), excellent communication skills, and a commitment to promoting a culture of privacy compliance throughout the organization.

The impact you will make:
Data Privacy Agreements and Policies and Procedures:

Develop and maintain data privacy policies, procedures, and standards to ensure compliance with applicable data protection laws and regulations.
Establish best practices for data collection, storage, processing, and sharing to minimize privacy risks and protect sensitive information.
Maintain company-wide data intake and usage map.
Review and provide advice on agreements with data privacy implications.
Draft data privacy agreements and addendums.

Provide Guidance and Training on Data Protection Practices:

Provide guidance and support to internal stakeholders on data protection practices, including data handling, consent gathering and management, data retention, and data subject rights.
Develop and deliver data privacy training programs and materials.

Conduct Privacy Assessments and Audits:

Conduct privacy impact assessments (PIAs) and data protection impact assessments (DPIAs) to identify and mitigate privacy risks associated with new projects, systems, or processes.
Perform regular privacy audits and compliance reviews to assess adherence to data privacy policies and identify areas for improvement.

Manage Data Subject Requests and Privacy Incidents:

Serve as the primary point of contact for data subject requests (DSRs), including access requests, rectification requests, and deletion requests, ensuring timely and accurate responses.
Manage privacy incidents and data breaches, including investigation, notification, and remediation activities, in accordance with legal requirements and internal procedures.

Monitor Regulatory Developments and Maintain Compliance:

Stay informed about changes in data privacy laws and regulations, including GDPR, CCPA, and other relevant legislation, and assess their impact on the organization.
Monitor compliance with data protection laws, regulations, and industry standards, and recommend changes to policies and procedures as needed to maintain compliance.

Collaborate with Cross-Functional Teams:

Collaborate with IT, HR, and compliance, to ensure alignment of data privacy initiatives with organizational goals and objectives.
Participate in privacy-related projects and initiatives, providing subject matter expertise and guidance as needed.

What you bring:
Required Skills/Abilities:

Knowledge of data privacy principles, practices, and methodologies, including privacy by design and privacy by default.
Experience developing and implementing data privacy policies, procedures, and standards in a corporate environment.
Strong analytical and problem-solving skills, with the ability to assess complex privacy issues and recommend practical solutions.
Excellent communication and interpersonal skills, with the ability to effectively communicate with stakeholders at all levels of the organization.

Education and Experience:

Five or more years of relevant legal experience, preferably at a major law firm or sophisticated in-house legal department.
Information security experience is a significant plus.
Law degree from a top law school.
Team player who appreciates business objectives.