Data Privacy Law Attorney

Cobalto Talent•Atlanta, GA

1d•Remote

About The Position

We are supporting a growing U.S. law firm in the search for an experienced Data Privacy Law Attorney to join its fully remote legal team. This is an excellent opportunity for an attorney with strong experience in U.S. privacy law, transactional matters, commercial contracts, and client counseling, particularly someone who enjoys working directly with sophisticated business and legal teams. The role may be structured as Senior Associate, Counsel, or Partner, depending on the candidate's experience and level of expertise.

Requirements

5+ years of experience specifically practicing Data Privacy Law.
Strong knowledge of U.S. privacy and data-security laws.
Hands-on experience with CCPA/CPRA and U.S. state privacy laws.
Experience drafting and negotiating DPAs, privacy provisions, and commercial agreements.
Strong transactional and contract-negotiation experience.
Excellent client counseling and communication skills.
Ability to manage complex matters independently.
Strong attention to detail and quality of work product.
Strong judgment, ownership, and follow-through.
Ability to work effectively with senior business and legal stakeholders.
Graduate of a Top 60 U.S. law school OR graduated in the top 20% of the law school class.
Active U.S. bar license in at least one U.S. jurisdiction.
Proven experience advising clients on data privacy, technology, marketing, and commercial matters.
Knowledge of marketing privacy, cookies, tracking technologies, AdTech, CRM, analytics, and consumer data practices.
Experience developing or managing privacy programs, including data mapping, compliance assessments, policies, procedures, and vendor risk management.
Ability to communicate directly with sophisticated clients, and collaborate with executive, technology, security, and business teams.

Nice To Haves

Experience mentoring, training, or leading other attorneys is highly valued.
Enterprise or in-house legal experience.
Experience working as a seconded or embedded legal resource.
Experience advising consumer-facing brands.
Privacy experience involving marketing and advertising technology.
Technology transactions experience.
SaaS and/or MarTech experience.
CIPP/US or CIPP/E certification.
GDPR and international privacy experience.
Data-security incident response experience.

Responsibilities

Advise enterprise clients on a broad range of privacy and transactional matters, including U.S. federal and state privacy laws, CCPA/CPRA and emerging state comprehensive privacy laws, and data privacy requirements for websites, applications, products, and services.
Address privacy issues involving marketing, advertising technology, cookies, tracking, and digital platforms, as well as data collection, use, sharing, retention, and disclosure.
Handle vendor and third-party privacy matters, privacy-by-design considerations, and international data transfers.
Draft and negotiate Data Processing Agreements (DPAs) and Standard Contractual Clauses (SCCs), privacy policies, privacy notices, and terms of use.
Manage technology and commercial agreements, including data-security and confidentiality provisions, indemnification, limitation of liability, warranties, insurance, and other risk-allocation provisions.
Develop and manage privacy compliance programs, data mapping, audits, and governance.
Assist with data-security incidents and incident-response planning.
Work closely with business, technology, security, marketing, and legal teams to provide practical, business-oriented legal advice.