Midlevel/Senior Associate – Regulatory (Consumer Protection - Privacy, Cybersecurity, and AI)

San Francisco, California

Job Description

Position Summary:

Ideal candidates will be problem solvers, self-motivated, and have extensive first-hand proficiency with counseling businesses on major global and U.S. data protection legal frameworks, the behind-the-scenes workings of the Internet, AI systems, and privacy and regulatory compliance, in addition to superior writing and communication skills, comfort with ambiguity, and a proven record of providing exemplary client service. This is a partner track position.

Ideal applicants will have 5 – 6 years of experience focusing on regulatory investigations or litigation involving consumer protection issues (State AG, FTC, and other regulatory agencies), and/or be well-versed in defending data privacy and security class actions (e.g., Stored Communications Act, wiretapping claims, claims involving allegedly unfair and deceptive trade practices, and data breach class actions). Successful candidates will have a high level of academic achievement from a nationally recognized law school, the ability to engage directly with clients and lead significant projects, general tech fluency, and impeccable analytical and writing skills.

The successful candidates will have experience providing Legal Advice on Almost Exclusively Data Protection Matters, and the Following Experience:

• •Assisting companies with compliance issues in relation to the CCPA and other state privacy laws, the FTC Act, GDPR and other global privacy laws and regulations (with additional consideration for sector-specific experience in financial services, children’s privacy, telecom, biometrics, genetics or digital advertising); working knowledge of HIPAA, FCRA, GLBA, COPPA, TCPA, CAN-SPAM is expected.
• •Drafting and revising privacy notices, terms of service, incident response plans, information security policies and other data protection policies.
• •Drafting and negotiating professional services agreements, vendor/service provider agreements, data processing agreements, cross-border transfer agreements, and other types of commercial agreements involving data sharing.
• •Responding to regulatory inquiries or investigations relating to privacy compliance and data breaches.
• •Working on corporate transactions in relation to privacy and security-related due diligence and advising.
• •Driving data breach preparation, risk mitigation, coordination and responses.
• •Familiarity with establishing AI governance programs and policies, the EU AI Act and U.S. federal and state-level artificial intelligence and automated decision-making/profiling laws and regulations.

Required Minimum Qualifications:

Candidate is required to have a bachelor’s degree and a Juris Doctorate degree (JD) from an accredited U.S. law school with excellent academics and be a member of the California State Bar in good standing. Finally, previous or current employment with an Am Law 100 firm is desired.

Desired Qualifications:

The successful candidate must have strong academic credentials, and excellent communication and interpersonal skills; must have superior oral advocacy and oral presentation, research and writing, analytical, organizational and time management skills; and must have excellent judgment and decision-making skills. Just as importantly, the candidate must be committed to developing and growing their practice and career, their network and their expertise in a fast-paced and exciting group that provides the highest level of client service.

Qualified applicants with arrest and conviction records will be considered for the position in accordance with the California Fair Chance Act.

California Pay range for this role, with final offer amount dependent on skillset and experience, is $365,000 – $390,000.

Pillsbury Winthrop Shaw Pittman LLP is an Equal Opportunity Employer.

If you require an accommodation in order to apply for a position, please contact us at PillsburyWorkday@pillsburylaw.com .