A leading law firm is seeking an associate with 3 to 6 years of active practice to join its Technology practice, focusing on data privacy, cybersecurity, AI and technology transactions/IP licensing matters. This is a multi-office opening.

The role involves direct and ongoing experience with cybersecurity incident response, state and federal breach notification requirements, analyzing internal privacy and security policies, and counseling clients on legal implications during and after a security incident. You will routinely draft and review service agreements, privacy policies, employee privacy notices, data and AI governance policies, terms of use, NDAs, EULAs, data protection addenda, business associate agreements and other IP and data-related contracts.

Candidates should have significant experience and deep knowledge of U.S. sector and state privacy regimes, including state privacy laws, GLBA, HIPAA and COPPA; familiarity with EU/UK GDPR and other international regimes is a plus. Experience with product counseling, digital marketing/adtech, AI deployment, chatbots, mobile apps, and M&A diligence and negotiation is preferred.

3–6 years of active practice in data privacy, cybersecurity, AI and technology transactions/IP licensing
CIPP/US certification required
Experience with cybersecurity incident response and breach notification requirements
Experience drafting and reviewing technology, data and privacy contracts
Knowledge of U.S. sector and state privacy regimes (GLBA, HIPAA, COPPA); EU/UK GDPR a plus
Detail-oriented, organized, and able to multi-task independently under deadlines
Excellent writing, communication and interpersonal skills

Apply for this role

Confidential. We never contact your current employer.