Data Protection Legal Counsel

Save to Favorites

Human Health Project (HHP)’s has a three- pronged foundation: Holistic Peer-to-Peer Information, Education and Support. Our objective is to empower people to manage their own health. For more information, please visit our website.

Data Protection Legal Counsel

* Provide legal advice to HHP on the full range data protection issues as well as select information security/cybersecurity issues.
* Work with technology and other stakeholders to build-out the existing privacy program.
* Prepare and assist in the preparation of privacy impact assessments.
* Review data leakage incidents and make determination as to whether any notifications are required. Draft and review and submit such notifications.
* Prepare and submit data protection notifications/registration with applicable data protection authorities.
* Advise colleagues in the Employment Law Group on matters pertaining to employee privacy (including subject access requests, monitoring programs, notice and consent requirements).
* Review and as needed uplift existing policies and procedures regarding data protections.
* Draft and review new policies, procedure, best practice documents, as needed.
* Help bring awareness and support for HHP's programs.
* Review and negotiate data protection and information security terms in vendor agreements, confidentiality agreements, etc.
* Prepare data protection-related training materials for use online.
* Liaise with colleagues in the US and EU to promote consistent data protection/privacy practices globally.
* Monitor and respond to developments in privacy and information security (i.e., new laws, regulations, important case decisions, regulatory guidance, etc.).
* Advise on privacy issues arising from the full range of marketing efforts and web-related advertising activities.

SKILLS/EXPERIENCE

* Law degree and qualification to practice law (can be US/EU).
* Minimum 5 years solid experience with data protection laws.
* Background or demonstrated interest in technology a plus.
* Experience drafting policies, procedures, notices and consents.
* CIPP (Certified Information Privacy Professional) accreditation a plus.
* Good leadership skills, demonstrated project management experience.
* Must be comfortable taking the initiative and working with minimal supervision.
* Effective communicator.
* Experience preparing and conducting data protection training.