Privacy and Cybersecurity Associate Attorney

A law firm in Atlanta, GA is seeking a Privacy and Cybersecurity Associate Attorney to join their team. This role involves leading projects, interfacing directly with clients, and developing comprehensive compliance programs related to privacy and cybersecurity. The ideal candidate will have 3-5 years of experience in data privacy counseling, a strong understanding of state privacy laws, and experience with adtech and sector-specific regulations.

Duties:

• Lead privacy and cybersecurity projects and directly interface with clients.
• Conduct compliance gap assessments and develop comprehensive compliance programs.
• Draft and review privacy policies, procedures, and guidance, including data subject request (DSR) procedures, incident response plans, and incident response tabletop exercises.
• Create contracting templates, playbooks, and provide advice on data sales/sharing and targeted advertising.
• Provide practical advice and implement state privacy laws, such as CCPA, WA MHMD, and other equivalent state laws.
• Offer guidance on adtech and cookies/online trackers, including TCPA, CAN-SPAM, and DAA/NAI/IAB self-regulatory rules.
• Advise clients in the financial and health/life sciences sectors, including expertise in GLBA, CalFIPA, FCRA, insurance privacy, FTC/CFPB rules (Reg P and Safeguards Rule), HIPAA, 42 CFR Part 2, and state health privacy laws.
• Assist clients with determining priorities, managing risks, and implementing compliance programs.
• Manage matters independently or significant segments of large/complex matters, ensuring timely project completion.
• Collaborate effectively within a team and maintain a positive, congenial work environment.

Requirements:

• 3-5 years of practical data privacy counseling experience.
• Specific experience with state privacy laws and adtech regulations is required.
• Strong preference for experience with the financial and health/life sciences sectors.
• Excellent organizational skills and attention to detail.
• Strong verbal and written communication abilities.
• Ability to prioritize workload, manage competing demands, and work under pressure.
• Proven ability to independently manage projects and facilitate completion.
• Experience in large law firms is required; boutique specialists may be considered.
• Certified Information Privacy Professional (CIPP-US, CIPT, CIPM) certifications are preferred but not mandatory.
• Must be admitted to practice in the jurisdiction.

Education:

• Juris Doctor (JD) degree from an accredited law school.

Certifications:

• Certified Information Privacy Professional (CIPP-US, CIPT, CIPM) preferred but not mandatory.

Skills:

• Exceptional organizational and attention to detail skills.
• Excellent verbal and written communication skills.
• Strong analytical and problem-solving abilities.
• Ability to work independently and manage complex matters.
• Collaborative approach with a capacity to work effectively in a team environment.
• Practical problem-solving skills and good judgment in data privacy and cybersecurity issues.

This global law firm provides a wide variety of legal services to clients from diverse industries. Its key practice areas include antitrust and competition, corporate and transactional, intellectual property law, litigation and dispute resolution, health and life sciences, real estate, and restructuring and insolvency. The firm has a team of over 1200 attorneys in several offices across North America and Europe including Atlanta, Georgia, and New York City, New York.