Privacy Associate

Orrick Herrington & Sutcliffe LLP•Washington, DC

2d•Hybrid

About The Position

We are seeking a highly qualified associate with 3–5 years of experience to join our established Cyber, Privacy & Data Innovation group. This position is open in our New York, San Francisco, Seattle, Boston, or Washington, D.C. offices. Our Cyber, Privacy & Data Innovation group sits at the intersection of regulatory compliance, transactional support, product counseling, and incident response. The team advises global companies on designing and implementing world-class privacy, cybersecurity, and AI compliance programs. Our work covers a broad spectrum of U.S. federal and state laws, international frameworks, and self-regulatory regimes. The group is also at the forefront of artificial intelligence governance and emerging technology. We help clients develop flexible AI governance frameworks, design tailored AI use policies, negotiate AI-related contracts, counsel on responsible AI innovation and algorithm development, and navigate the rapidly evolving AI regulatory landscape. The team has developed innovative client-facing tools, including the Orrick AI Law Center, EU AI Act reference guide, U.S. AI Law Tracker, Gen AI Policy Builder, and Privacy in a Box.

Requirements

3–5 years of relevant experience in privacy, cybersecurity, AI, and data protection matters at a law firm or in-house legal department.
Experience advising on compliance with major privacy and data protection frameworks (e.g., CCPA/CPRA, GDPR, HIPAA, GLBA, COPPA, BIPA, CAN-SPAM, TCPA).
Substantial experience negotiating privacy, security, and data-related terms in commercial contracts and handling all privacy and security components of corporate transactions.
Excellent drafting, negotiation, analytical, and writing skills.
Proactive communication and excellent project management skills.
Superior verbal and interpersonal communication skills; ability to engage directly with clients and lead significant projects.
Strong academic credentials from a nationally recognized law school.
Ability to work effectively as part of a collaborative global team spanning multiple offices and jurisdictions.
Demonstrated aptitude for technology and understanding of online technologies, digital advertising, and emerging technologies such as artificial intelligence and machine learning.
JD is required.
Admission to the state bar of the office in which the candidate would be located.

Nice To Haves

Familiarity with AI regulatory developments and emerging AI governance frameworks is strongly preferred.
CIPP/US, CIPT, CIPM, AIGP, or other IAPP certifications are a plus.

Responsibilities

Advising global companies on designing and implementing world-class privacy, cybersecurity, and AI compliance programs.
Counseling clients on self-regulatory programs and frameworks, including NIST, ISO, and OECD frameworks for AI risk management and cybersecurity, the Payment Card Industry Data Security Standard, the EU-U.S. Data Privacy Framework, Binding Corporate Rules, APEC Cross-Border Privacy Rules, and online behavioral advertising programs such as the DAA IAB, and NAI.
Helping clients develop flexible AI governance frameworks.
Designing tailored AI use policies.
Negotiating AI-related contracts.
Counseling on responsible AI innovation and algorithm development.
Navigating the rapidly evolving AI regulatory landscape.
Negotiating privacy, security, and data-related terms in commercial contracts.
Handling all privacy and security components of corporate transactions.