Data Privacy & Cybersecurity Associate

Join Shumaker’s Technology, Data Privacy, Cybersecurity & AI Service Line as a Privacy & Cybersecurity Transactional associate attorney. We help companies of all sizes plan for growth and manage the risks associated with the collection, use, and disclosure of consumer, health, financial, employee, and other sensitive information. We provide our clients with comprehensive cybersecurity legal services, from governance, preparedness, and compliance to data breach response, and defense of regulatory investigations and multidistrict class‑action litigation. We are seeking an associate with a minimum of four years of privacy experience to join our team. Our team represents leading clients across industries to help them navigate complex data privacy and security issues in high‑profile and cutting‑edge compliance and transactional matters. The ideal candidate will have counseled clients on compliance with privacy laws, negotiated the privacy and security components of commercial services agreements, and handled all privacy and security components of corporate transactions (including M&A deals, IPOs, financings, and technology transactions). The candidate must have excellent drafting and negotiation skills, as well as superior verbal and interpersonal skills, and be able to manage multiple projects and deadlines simultaneously while proactively driving matters forward with general supervision. Where You’ll Work This role is open to candidates who reside within a reasonable commuting distance to a Shumaker office in Florida, Ohio, Minnesota, North Carolina, or South Carolina to participate in the firm’s hybrid work structure. Shumaker offers a flexible, hybrid work environment—balancing autonomy with the collaboration and connection that come from being integrated with the team. What You’ll Do Counsel clients on privacy compliance aspects of transactional work, including mergers and acquisitions, financings, capital markets transactions, and technology transactions. Draft privacy and security policies, negotiate privacy‑related contracts, and prepare data processing agreements. Handle all privacy and security components of corporate transactions, including M&A deals, IPOs, and due diligence. Stay ahead of legal developments across federal privacy laws (e.g., TCPA, GLBA, FCRA, CAN‑SPAM, COPPA, and the FTC Act), state privacy laws (e.g., CCPA), and international privacy laws and regimes (e.g., GDPR), translating changes into practical guidance. Collaborate directly with partners and clients to develop practical, compliant data governance strategies, negotiate the privacy and security components of commercial services agreements, and build lasting client relationships. Lead and assist with incident response, risk assessments, compliance reviews, and regulatory strategy. Who We’re Looking For Bar admission in good standing in Florida, Ohio, Minnesota, North Carolina, or South Carolina is required. Four or more years of relevant legal experience in data privacy, with a clear trajectory for advancement. A solid understanding of federal privacy laws (e.g., TCPA, GLBA, FCRA, CAN‑SPAM, COPPA, and the FTC Act), state privacy laws (e.g., CCPA), international privacy laws and regimes (e.g., GDPR), and technology and data flows. Experience counseling clients on privacy compliance aspects of transactional work, including mergers and acquisitions, financings, capital markets transactions, and technology transactions. Experience drafting privacy and security policies and negotiating privacy‑related contracts or data processing agreements. An aptitude for technology and an understanding of how online technologies work; experience with AI counseling, including advising on AI governance frameworks, AI‑related contract provisions, and emerging AI regulations, is highly valued as this is a growing area of our practice. Ability to manage multiple projects and deadlines simultaneously and proactively lead on driving matters forward with minimal supervision. Excellent oral, written, and interpersonal skills, along with superior academic credentials and strong professional references. Exceptional candidates looking to broaden their practices to privacy and cybersecurity with experience in either M&A or technology transactions will be considered. What We Offer Competitive compensation and a comprehensive benefits package designed to support you. Dedicated mentorship and professional development opportunities to help you grow your practice. A collegial, supportive culture that values quality work, teamwork, and work‑life balance. Direct exposure to high‑profile matters and sophisticated clients across a range of industries. Physical Requirements Sitting frequently, approximately six out of eight hours per day. Sitting position static for up to one‑half hour at a time. Standing or walking frequently, up to six hours per day. Lifting and carrying up to 20 pounds occasionally, up to one hour per day. Bending and stooping occasionally, up to one‑half hour per day. We are committed to providing reasonable accommodations to individuals with disabilities to ensure equal access to employment opportunities. If you require accommodations during the application or interview process, please let us know. #J-18808-Ljbffr Shumaker