ACM Data Privacy Operations Associate

Rochester Regional Health

3d•$32 - $38•Remote

About The Position

The Data Privacy Operations Associate plays a key role in supporting the Global Data Privacy department by contributing to a wide range of privacy, regulatory, and compliance initiatives. This position is responsible for assisting with data privacy matters, contract review, and governance processes, while ensuring alignment with applicable laws and organizational policies.

Requirements

Bachelor’s degree or paralegal certificate required
3 years corporate administrative, secretarial, or legal paralegal experience

Nice To Haves

One or more International Association of Privacy Professionals (IAPP) certifications strongly preferred: CIPP/US, CIPP/E, CIPM, CIPT, and/or AIGP (Artificial Intelligence Governance Professional)
Proficient with modern office (MS Word, Excel, PowerPoint, SharePoint)
Experience with electronic research/database tools such as OneTrust and Westlaw
Exceptional oral and written communication skills
Ability to negotiate and interact professionally with colleagues, vendors, and customers
Strong organisational skills and the ability to manage multiple tasks and priorities effectively
Strong background in compliance, privacy, or related clinical trial field
Solid understanding of GDPR, CCPA/CPRA, and general data protection principles
Proven ability in project management and research
Experience in AI governance, responsible AI, or emerging AI regulatory compliance are strongly preferred.

Responsibilities

Manage and help oversee Data Processing Agreements
Gather information about existing and new data processing information including but not limited to client and vendor agreements
Manage, track, index and monitor the status of all existing data processing and new contracts involving privacy issues or personal information
Track, manage, and organize privacy-related requests for information (RFI), and client questionnaires
Gather information needed from other departments to assist the DPO in documenting ACM’s privacy program.
Assist with updating ACM policies, procedures, and training materials related to the handling of personal information; maintaining an overall index of privacy program materials; and interviewing other team members about their current practices
Assist with various projects to support ACM’s compliance with applicable privacy laws,
Work with cross-functional teams to help update data retention policies and procedures; assist with ACM’s data inventory maintenance; and help the business understand and operationalize new legal requirements
Support the DPO in addressing data subject access requests or data privacy litigation matters by compiling, reviewing and organizing the necessary documentation.
Monitor ACM data privacy data mapping and assessments and to keep up to date with current data privacy regulations.
Partner with legal and compliance team members, and the Information Security team, to support ACM’s Privacy Impact Assessment process, and other projects tied to privacy and legal issues at ACM.
Provide high-level administrative and executive support to the Global Data Privacy Officer (DPO), including calendar coordination, meeting preparation, document organization, scheduling, follow-up tracking, and management of confidential materials.
Coordinate cross-functional meetings, maintain project timelines, track deliverables, and ensure timely completion of privacy and compliance initiatives.
Leverage AI-enabled productivity and research tools to assist with document review, legal research, workflow organization, meeting summaries, data analysis, and administrative efficiencies while maintaining confidentiality and compliance standards.
Develop and maintain organized filing systems, tracking tools, spreadsheets, dashboards, and status reports to support operational efficiency and executive-level reporting
Conduct routine and specific legal and factual information research and data compilation
Assist with regulatory research and external communications related to legal matters
Assist with other projects and duties as assigned