Information Governance Attorney

Advise clients on privacy compliance and information governance frameworks, including designing and implementing privacy programs and privacy-by-design for products and services.

Draft and update privacy notices, internal data governance policies, incident response procedures, and technology/data processing agreements (including DPAs, data sharing, SaaS, and cloud contracts).

Regulatory and transactional work

• Interpret and apply major privacy and data protection laws, including CCPA, GDPR, FTC Act, COPPA, GLBA, FERPA, BIPA, WMHMDA, and related AI-focused regulations at federal, state, and international levels.
• Support M&A and other corporate transactions by conducting data privacy and cybersecurity due diligence, identifying regulatory and contractual risk, and assisting with responses to regulatory inquiries or investigations

Responsibilities include advising technology, life sciences, and emerging technology clients on privacy compliance, drafting privacy and data governance policies, and negotiating technology and data processing agreements.

• Must demonstrate strong knowledge of CCPA, GDPR, FTC Act, COPPA, GLBA, FERPA, BIPA, WMHMDA, and emerging AI regulations.
• Experience with M&A due diligence and regulatory inquiries is preferred.
• Strong academic credentials and a collaborative mindset are essential.