
Role Title: Senior Associate–Privacy and AI Counsel
Reports to: EP’s founder and lead attorney, Jackie Wilkosz
Role Type: 1099 independent contractor role to start
Location: This is an all-virtual position with the possibility of in-person meetings if you’re located in the San Francisco Bay Area.
Compensation:
Pay is hourly. Rate depending on the successful candidate’s level of experience.
Enlightened Privacy (EP), PC is a boutique data protection law practice poised to mature to the next level. To provide the highest level of service and build inspiring future offerings for our clients, we are looking to evolve and expand.
We are seeking a smart, talented privacy attorney contractor to join our team. Our ideal candidate is someone who welcomes flexibility, is a self-starter and is able to lead and manage their own projects with ease.
The candidate welcomes new challenges and opportunities to learn and is a superstar at analyzing and applying new laws and legal requirements. They can distill complex legal requirements into concise guidance that is actionable and easy to understand, like magic. They resonate with and share EP’s values. They are thoughtful, kind, authentic and wholehearted.
In this role, the successful candidate will be responsible for the following activities
Provide practical guidance to clients on compliance with applicable laws, such as the CCPA, other US state privacy laws, and the GDPR
Analyze data protection and privacy laws and regulations on a granular level, grasp the nuances of legal requirements, and understand and explain the business implications
Draft and negotiate DPAs and advise clients on how to implement and negotiate DPAs
Draft, update and help clients implement privacy notices (for customers, HR, and recruiting)
Create compliance documentation for clients, such as records of processing activities and internal data protection policies and procedures
Lead and coordinate client projects that you’re involved in
Engage directly with clients via calls, email and written work product
Research emerging and newly enacted data protection and AI laws and regulations and be able to advise clients on the requirements as applied to each client’s unique needs
Provide clear, actionable summaries of legal requirements, both for clients and internal use
Compare legal requirements across different jurisdictions globally to understand and advise on similarities and differences
Assist and collaborate with EP on developing new projects, initiatives and offerings. For example, new offerings for small business clients and adoption of new tech tools.
Qualifications of a successful candidate
Minimum of 3 years experience at a law firm or in-house (or both) in data protection and privacy or data governance
J.D. degree from an ABA-approved law school, and an active member in good standing of the CA Bar
Proficient at using Google Workspace, Slack, Microsoft 365 applications, and time-keeping applications
Experience using AI tools competently and ethically in the legal context; experience using GC AI or another legal-specific AI tool a plus
Strong working knowledge of and experience advising clients on key global data protection and privacy laws–GDPR, UK GDPR, CCPA, US state privacy laws are must haves, other geos (e.g., Brazil, Canada) are a plus
Experience drafting privacy policies and DPAs
Experience drafting data governance documentation and written guidance for business on compliance with applicable data protection laws and regulations
Knowledge of and experience with analyzing and applying recent AI legislation, such as the EU AI Act and US state legislation
Experience implementing and/or managing OneTrust or other privacy compliance or data governance tech tools a plus
Knowledge of and experience with the NIST AI Risk Management Framework a plus
Understanding of and experience with data broker laws and data protection and privacy laws as applied to marketing and digital advertising a plus
Experience with fintech companies, financial privacy, or crypto space a plus
Experience with children’s privacy laws, including COPPA, FERPA, age appropriate design codes, and recent children’s and minors’ privacy legislation, a plus
Understanding of and experience with data breach laws and cybersecurity frameworks (e.g., SOC 2, NIST frameworks) and controls a plus
Skills of a successful candidate
Excellent writing skills (impeccable grammar and spelling skills, drafting is an area of strength)
Meticulous attention to detail
Experience assessing and balancing risk and advising on practical, business-oriented solutions to compliance needs
Thinks logically and nimbly, seeing multiple different perspectives and approaches to a particular question
Self-starter who is comfortable running with projects independently and knows when to ask questions and what questions to ask; takes ownership of and responsibility for their tasks and work product
Able to take direction, is curious and excited to learn
Collaborative and creative with a sense of humor and penchant for having fun
Able to interact with clients directly and competently; has a proven ability to handle clients and their confidential information with discretion and to provide the highest level of client service
Proficient at working virtually and leveraging tech tools to maximize collaboration, efficiency and results
Kind and mindful
Excited to be part of a young, small, and growing business
Stats about the role
Work with/report to: This role reports to and works directly with EP’s Founder. The role also may coordinate with EP’s IT and business operations contractors.
Expected time commitment: This would be a part-time role, with an expected baseline commitment of 12-15 hours per week. You will have the option to take on more work if desired, as available. We expect you to be available for calls and check-ins on at least 2 dedicated days per week, to be agreed upon prior to your start date. If a special project requires additional time, we will discuss and agree in advance as the need arises. We expect your availability to align with the Pacific Time zone. (For example, 10 am - 3 pm PT Tues, Weds, Thurs).
Location: This role is intended to be fully virtual/remote, with a possibility to meet in person periodically if the selected candidate is local to the San Francisco Bay Area.
Legal details: This would be a 1099 independent contractor role.
Compensation: Base pay would be hourly starting at between $130 and $170 per hour depending on experience. You may be offered the option of earning additional bonus compensation for business development-related work.
Tech: Candidates should have their own computer to start with appropriate security software installed.
About EP
Enlightened Privacy, PC is a woman-founded and woman-owned boutique law practice focused on global data protection, privacy and AI data governance. We advise clients in a variety of industries, from tech to consumer products companies, and from startups to established public companies. We guide our clients on building and managing data protection and privacy compliance programs, and advise on compliance with the GDPR and U.S. state privacy laws such as the CCPA, as well as AI legislation and governance requirements. We like to have fun and love to learn, and we also know how to roll up our sleeves and get down to business. Our ideal candidate does too!
The Application Process
Our intention is to be as thoughtful and clear as possible in our assessment and selection process. Each step in this process was created with that intention in mind. We think that this will lead to the best outcome for the selected candidate and EP! We hope you enjoy the process and even learn something about yourself in the process. We're an equal opportunity employer. All applicants will be considered without attention to race, color, religion, sex, sexual orientation, gender identity, national origin, veteran or disability status.
To Apply
1. Answer the application questions in the Google Form link below (we’d like to hear this from you, not AI please)
2. Attach your resume in the Google Form
3. Click Submit!
If you have any difficulty with the application form, please reach out to us at info@enlightenedprivacy.com.
Once we’ve received and reviewed your submission, we will reach out with information on next steps.