Description:

An International Law Firm is seeking an attorney with a minimum of 3 years of experience counseling on data privacy matters to join our rapidly growing Data, Privacy & Cybersecurity group. The position, based in our San Francisco office, will provide exceptional candidates the opportunity to work on cutting edge matters, gain significant responsibility, and have direct exposure to clients while working with experienced GT privacy and security attorneys in the U.S. and abroad.

An International Law Firm Data, Privacy & Cybersecurity group has extensive experience advising clients, from Fortune 500 companies to start-ups, in numerous industries including technology, fintech, e-commerce, healthcare, retail, adtech and entertainment, helping to navigate data protection compliance requirements in the U.S. and globally. In this role, you will work on a wide-range of data protection issues such as cross-border transfers, product counseling, cookies and adtech, regulatory investigations, ransomware attacks, corporate transactions, and compliance with evolving data protection laws.

To service the needs of GT's global client base, you must be self-motivated, have a deep familiarity with major global and U.S. data protection legal frameworks, technical mastery of the workings of the Internet, superior writing and communication skills, comfort with ambiguity, outstanding interpersonal skills, and a proven record of providing exemplary client service. This is a partner (shareholder) track position.

Job Qualifications:

Admission to practice law in California with excellent academic credentials.
3+ years of experience specializing in providing legal advice on data protection matters.
Experience assisting companies with compliance issues in relation to the CCPA/CPRA, GDPR, ePrivacy Directive, the FTC Act and other global privacy laws and regulations (with additional consideration for sector-specific experience in financial services, education, telecom, biometrics, or digital advertising); knowledge of HIPAA, FCRA, GLBA, COPPA, TCPA, CAN-SPAM is beneficial.
Experience drafting and revising privacy notices, terms of service, incident response plans, information security policies and other data protection policies.
Experience drafting and negotiating professional services agreements, vendor/service provider agreements, data processing agreements, cross-border transfer agreements, and other types of commercial agreements involving data sharing.
Experience in working on corporate transactions in relation to privacy and security-related due diligence and advising.
Experience in driving data breach preparation, risk mitigation, coordination and responses.
IAPP CIPP certification (U.S. and EU) is strongly preferred.