Senior Counsel – Data Privacy & Protection

This is a fully remote position, open to applicants in United States.

📋 Description

• Serve as a primary subject matter expert and advisor for Fujifilm attorneys and business teams regarding data privacy and protection laws.

• Provide guidance to legal and business teams on best practices and adherence to U.S. and international data protection regulations.

• Work collaboratively with privacy and security colleagues to strengthen the company’s privacy program and mitigate privacy risks.

• Assist in privacy impact assessments, vendor risk evaluations, and internal reviews utilizing data mapping and inventory information.

• Facilitate the development and management of privacy training and awareness programs.

• Review, draft, and negotiate terms related to AI, privacy, and data security in contracts with business partners and vendors.

• Draft, review, and negotiate Business Associate Agreements, Data Processing Agreements, Data Protection Agreements, and Security Agreements.

• Provide counsel on data protection laws impacting business operations and contractual agreements.

• Offer advice on emerging products and technologies while navigating privacy considerations.

• Counsel on investigations involving unauthorized access, loss, or disclosure of personal data.

• Support enterprise-wide readiness for incident response and provide guidance on privacy and cybersecurity incident management.

• Identify critical legal issues for the privacy compliance team and foresee potential privacy-related legal challenges.

• Advise Information Security, Compliance, and other stakeholders in privacy and data management.

• Assist in AI governance and responsible-use frameworks while monitoring new AI privacy and data protection regulations.

• Collaborate with Compliance, Data Governance, IS, IT, and business stakeholders to evaluate privacy risks associated with AI and automated decision-making systems.

• Support compliance with HIPAA Privacy obligations, encompassing incident response and regulatory alignment.

⛳️ Requirements

• A JD degree and active membership in a U.S. state bar are mandatory.

• A minimum of 8-12 years of experience as a practicing attorney, either in-house or at a law firm.

• At least 5-10 years of direct, hands-on experience in providing legal counseling on data privacy and security issues.

• Comprehensive understanding of relevant privacy laws, regulations, and guidelines, including CPRA, VDCPA, CMIA, state breach notification laws, HIPAA, GDPR, TCPA, and CAN-SPAM.

• Significant experience in assessing legal risks associated with data protection, privacy, and AI.

• Proficient in drafting and negotiating contracts and provisions related to AI, privacy, and security.

• Experience with data loss prevention and cybersecurity incidents, including forensic investigations, breach notifications, and preparedness.

• Proven track record in managing privacy and/or cybersecurity incident response initiatives.

• Exceptional negotiation and communication abilities.

• Privacy and AI certifications are advantageous, such as CIPP-US, CIPP-C, CIPP-E, CIPM, AIGP, and CHPC.

• Interest and experience in new and emerging technologies, particularly in healthcare and life sciences.

• Strong organizational skills, teamwork, work ethic, multitasking, prioritization, initiative, project leadership, and collaboration skills.

• Detail-oriented and self-driven.

• A strong dedication to integrity and professionalism, along with a demonstrated passion for excellence.

🏝️ Benefits

• Medical, Dental, Vision

• Life Insurance

• 401k

• Paid Time Off

• Flexible work environment