Legal Data Analyst – Privacy, Cyber & AI

Troutman Pepper•New York, NY

4d•$85,000 - $125,000•Hybrid

About The Position

We are always seeking talented, motivated, growth-minded, and creative individuals. Our firm is committed to providing employee support and advancement, while embracing inclusion and innovation as keys to a stronger future. We invite you to explore the position below and to submit your application to join our team! The Legal Data Analyst – Privacy, Cyber & AI supports Troutman Pepper Locke’s Privacy + Cyber and Regulatory Investigations, Strategy + Enforcement (RISE) practice groups by building and maintaining a comprehensive Privacy Litigation & State Attorney General Enforcement Tracker, among other strategic responsibilities. The Legal Data Analyst – Privacy, Cyber & AI sits at the intersection of substantive privacy, cyber, & AI law; data analysis; and generative AI. The Legal Data Analyst – Privacy, Cyber & AI reviews and classifies litigation and enforcement materials, validates AI-generated outputs, and converts unstructured information into accurate, structured data and practical insights that attorneys can rely on in client-facing work. The Legal Data Analyst – Privacy, Cyber & AI combines high‑judgment legal analysis with detail‑intensive, sometimes repetitive validation and data cleanup.

Requirements

Demonstrated familiarity with privacy, cybersecurity, data protection, and/or AI-related legal issues (through practice, research, or focused academic work).
Ability to read, interpret, and succinctly summarize complaints, court orders, AG actions, settlements, and regulatory guidance.
Strong analytical judgment and issue-spotting skills, including the ability to determine how matters should be categorized within a structured tracker.
High attention to detail and willingness to perform repetitive, detail-heavy validation and data-cleaning tasks.
Proficiency with Microsoft Excel (e.g., filters, formulas, sorting, basic data validation and cleanup); ability to manage structured datasets accurately.
Strong organizational and documentation skills; ability to follow and maintain consistent coding standards and clearly explain decisions in writing.
Excellent written and verbal communication skills, including the ability to present findings clearly to non-technical stakeholders.
Ability to serve as a bridge between attorneys and technical teams, translating legal questions into structured data and turning data back into clear, practice-relevant insights.
Bachelor's degree; J.D., M.B.A., or M.L.S. preferred.
Directly relevant experience in privacy, cybersecurity, data protection, AI law, legal research, or legal data analytics.
Minimum of two (2) years of relevant experience in privacy, cybersecurity, data protection, or AI-related legal practice (e.g., attorney, staff attorney, law clerk); paralegal, law librarian, research or knowledge management attorney, litigation support, or analyst role supporting privacy/cyber or regulatory work; and/or legal data, legal operations, or legal technology roles involving structured matter, docket, or enforcement tracking.
Familiarity with legal research platforms (e.g., Westlaw, Lexis, CasePortal, PACER) and Boolean search strategies.
Exposure to key privacy and cybersecurity frameworks and statutes (e.g., CCPA/CPRA and state analogs, BIPA and other biometric laws, state wiretapping/recording statutes, data breach notification laws, emerging AI regimes).
Experience using generative AI tools beyond casual use (e.g., for research, extraction, summarization or analysis), with a skeptical, validation-focused approach to AI output.

Nice To Haves

Experience with, or interest in developing skills in Power BI or other business intelligence tools for dashboards and reporting; SQL for querying and validating data; Python (e.g., pandas) or similar tools for data processing and automation.

Responsibilities

Review and interpret privacy, cybersecurity, and AI-related litigation and enforcement materials (e.g., complaints, class actions, AG releases, settlements, regulatory guidance).
Identify and code key elements for the Tracker, including causes of action, statutes invoked, factual themes, jurisdiction, parties, and procedural posture.
Classify matters into clear categories reflecting core privacy legal issues (e.g., wiretapping/recording, data breach litigation, intrusion upon seclusion, consumer privacy, trap and trace, malfunctioning cookie consent, AI/automated decision-making, etc.).
Collaborate with practice leadership and the Data Solutions team to define and refine Tracker fields, taxonomies, and coding rules.
Use generative AI tools (e.g., ChatGPT, Claude, Perplexity) to run structured prompt workflows that extract data from unstructured text.
Validate AI-generated outputs against source documents; identify and correct hallucinations, misclassifications, missing data, and inaccurate descriptions.
Maintain clean, consistent datasets by deduplicating records, standardizing entity names, and applying uniform coding conventions.
Verify citations and URLs, confirming that links are functional, accurate, and traceable to authoritative sources (e.g., dockets, AG and agency sites, research platforms).
Support development and maintenance of Tracker reporting (e.g., Power BI dashboards, Excel-based reports) that surface litigation and enforcement trends for attorneys and clients.
Document processes, coding guidance, validation checklists, and prompt templates to support consistency, scaling, and handoff.
Maintain the confidentiality of firm and client information and comply with firm policies and procedures.