The OpportunityReporting to the Senior Legal Counsel, Americas, the Data Privacy Counsel serves as the primary legal resource for data privacy, cybersecurity, and related compliance matters across North America, with additional support for Central and South America. The role provides practical guidance, manages risk, and helps drive business growth and innovation while ensuring compliance with evolving privacy and AI governance requirements.
Responsibilities- Serve as the lead legal contact for privacy, cybersecurity, information governance, AI governance, and emerging technologies.
- Advise on federal, state, and sector-specific privacy laws, including HIPAA.
- Draft, negotiate, and manage DPAs, cross-border transfer agreements, vendor agreements, and privacy-related contract provisions.
- Partner with business groups to embed privacy-by-design and data governance principles.
- Lead DPIAs, data mapping, inventory, and governance initiatives.
- Advise on data collection, use, sharing, retention, transfer, and disposal.
- Develop and maintain privacy policies, procedures, and standards.
- Monitor privacy, cybersecurity, and AI regulatory developments.
- Support breach response, investigations, and regulatory reporting.
- Assist with privacy and cybersecurity diligence for acquisitions.
- Deliver training and conduct legal risk assessments for emerging technologies.
Qualifications and ExperienceRequired- Juris Doctor (JD) from an accredited law school.
- Pennsylvania or New Jersey Bar membership in good standing.
- CIPP/US certification.
- 5+ years of legal experience advising on privacy, AI, and data protection matters.
- Deep knowledge of U.S. privacy, breach notification, and federal privacy laws, including HIPAA.
- Experience negotiating DPAs and related privacy agreements.
- Experience with cybersecurity incidents, breach response, AI governance, and privacy risk management.
- Strong judgment, analytical skills, communication abilities, and stakeholder management skills.
Preferred- Professional services or consulting experience.
- Knowledge of Canadian privacy laws, including PIPEDA.
- Knowledge of Central and South American privacy frameworks.
- Additional certifications such as CIPP/C, AIGP, or CIPM.
What we offer:At HKA we recognize that our people are critical to our ongoing success. Our priority is to provide an inclusive and collaborative culture aimed at providing the best opportunities for our people to thrive and develop in their chosen career path.
Our Global Recruitment team is committed to providing an authentic candidate experience for all those who take the time to apply to HKA. We are committed to providing an efficient and insightful recruitment process giving candidates a true reflection of life at HKA.
Department Legal Locations Philadelphia, PA Remote status Hybrid Employment type Full-time