Data Privacy Attorney

A law firm is seeking an experienced Data Privacy Attorney to join their team in Chicago, IL. The ideal candidate will have over 5 years of relevant experience and will be responsible for ensuring the firm’s compliance with data privacy laws across multiple jurisdictions. The role involves collaboration with various internal departments to manage data privacy risks, review and negotiate vendor contracts, and maintain the firm’s data privacy practices.

Key Duties and Responsibilities:

• Collaborate with the Office of the General Counsel, Security & Risk Management, and Audit & Advisory departments to ensure compliance with data privacy laws in the U.S., EU, Asia, and the Middle East.
• Work with the Procurement function and Security Review Team to review, draft, and negotiate vendor contracts and commercial relationships involving personal data transfers.
• Partner with the Global Data Privacy Office (GDPO) and other stakeholders to assess and advise on privacy risks related to new projects, including conducting privacy impact assessments.
• Respond to data subject access requests, including those to access or delete personal data, in compliance with applicable data privacy laws in the UK, EU, and U.S.
• Implement and manage measures to demonstrate compliance with data privacy laws, including managing records of processing activities, data mapping, and vendor management reviews.
• Review and update global transparency notices, privacy policies, and procedures, and assist with data privacy audits of the firm’s offices worldwide.
• Support the maintenance and management of the firm’s Binding Corporate Rules and assist in their ongoing review.
• Demonstrate strong interpersonal skills to effectively interact with individuals at all organizational levels.
• Exhibit strong project management and organizational skills, including time management, prioritization, and handling multiple deadlines.
• Drive improvements to the firm’s compliance posture through proactive initiatives.

Requirements:

• Juris Doctor (JD) or equivalent from an accredited law school.
• 5+ years of relevant experience in data privacy law.
• Experience advising on European Union data privacy law is preferred.
• Demonstrated ability to interact effectively with individuals at various organizational levels.
• Strong project management and organizational skills, with the ability to manage time well, prioritize tasks, and handle multiple deadlines.
• Initiative in driving compliance improvements.

Benefits:

• Healthcare, life, and disability insurance.
• Generous 401(k) plan.
• At least 11 paid holidays per year.
• Paid time off (PTO) program accruing 23 days in the first year, with additional accrual based on tenure.
• Well-being programs, including mental health services, mindfulness and resiliency resources, medical resources, and well-being events.
• Professional development programs.
• Employee discounts.

The Midwest law office started their legal practice thirty years ago. More than one-hundred skilled attorneys are on staff. Areas of specialization are transactional and litigation law. Practice areas are comprehensive. Asset-based lending, bank financing, benefits-compensation, capital markets, environmental litigation, securities litigation-professional liability and transactional tax are some of their practice disciplines. Hospitality, financial services, energy and healthcare are a few of their practice industries. The Midwest practice is known for their legal prowess in tax matters of renewable energy projects.