Privacy Associate

• Advise clients on website tracking technologies and digital marketing compliance in the U.S. and internationally, including pixels, cookies, session replay, and ad tech vendors; consent management platform configuration; opt-out mechanisms (including Global Privacy Control); and related exposure under the CCPA, state wiretapping laws (e.g., CIPA), the VPPA, and analogous state privacy statutes, as well as GDPR and ePrivacy requirements for international properties.
• Counsel employers on employee monitoring solutions, including telematics and dashcam programs, GPS tracking, productivity and communications monitoring, and workplace surveillance notice requirements under state and federal law.
• Advise on biometric data collection and processing—timekeeping, facial recognition, driver-facing cameras, and similar technologies—under BIPA and other state biometric privacy or electronic monitoring laws, including consent, retention, and vendor management requirements.
• Guide clients through data breach preparedness and incident response, including analysis under state and federal breach notification laws, coordination with forensic vendors, notification strategy, and post-incident remediation.
• Negotiate MSAs, data processing agreements, and privacy and security terms in vendor and service agreements, including independent contractor and staffing arrangements.
• Advise on international data transfers, including standard contractual clauses, the EU-U.S. Data Privacy Framework, transfer impact assessments, and cross-border HR data flows.
• Build and maintain CCPA compliance programs for employers, including HR data compliance (notices at collection, DSAR response processes for employees and applicants, data inventories and retention schedules), sale/share analysis for tracking technologies, and opt-out implementation.
• Counsel on emerging workplace technology issues, including AI-enabled hiring and monitoring tools and related state and local automated decision-making laws, background check and applicant data compliance, and employee health and safety data handling.
• Prepare client-facing deliverables, including privileged compliance assessments, remediation roadmaps, policies and notices, and training materials.

• J.D. and active bar membership in good standing.
• 3+  years of experience in privacy and data security counseling, ideally with employment law exposure.
• Working knowledge of the CCPA and other state comprehensive privacy laws, BIPA, state breach notification statutes, and GDPR.
• Comfort with the technical side of the practice—reading network traffic or tag manager configurations, evaluating tracking technology implementations, and translating technical findings into legal analysis and IT-actionable recommendations—or a demonstrated aptitude and interest in developing it.
• CIPP/US, CIPP/E, or similar certification a plus.
• Strong drafting skills and the ability to manage multiple client engagements independently.

Please note, we are not working with outside recruiters for this position.

Ogletree Deakins offers a robust suite of benefits for our attorneys including: comprehensive training and development programs including an annual firm-wide Attorney Retreat, CLE and bar admission expense reimbursement, several competitive annual bonus programs, 401(k) plan, affordable health, and life insurance including dental and vision coverage, flexible spending accounts to help offset the cost of dependent care and/or health care expenses, employee assistance program, back-up childcare program, and a paid parental leave on-ramping program.

If you have questions, please e-mail Ali Gardiner at ali.gardiner@ogletree.com with “Data Privacy Associate" in the subject line. Please note, applications submitted via e-mail will not be considered.

Ogletree Deakins is one of the largest labor and employment law firms representing management in all types of employment-related legal matters. Best Law Firms® has named Ogletree Deakins a “Law Firm of the Year” for 14 consecutive years. In the 2025 edition, the publication named Ogletree Deakins its “Law Firm of the Year” in the Litigation – Labor and Employment category. Ogletree Deakins has more than 1,100 attorneys located in 60 offices across the United States and in Europe, Canada, and Mexico. The firm represents a diverse range of clients, including many of the Fortune 50 companies in the U.S.

We are fully committed to the importance of diversity within the legal profession, as well as all workplace environments.

Equal Opportunity Employer.