Data Privacy Lawyer

Role Summary

Shearman & Sterling are looking for an experienced data privacy lawyer to join the growing global Data Privacy team, which is part of the Office of General Counsel. Data Privacy supports the delivery of business strategy, while helping the business meet their legal, regulatory and contractual privacy-related requirements. The successful candidate will report to the Director of Data Privacy in London.

Firm Description

Shearman & Sterling has been advising many of the world’s leading corporations and financial institutions, governments and governmental organisations for more than 140 years. The firm has approximately 850 lawyers in 22 offices around the world. Our lawyers come from some 80 countries, speak more than 60 languages and practice US, English, EU, French, German, Italian, Hong Kong, OHADA and Saudi law. We also practice Dubai International Financial Centre law and Abu Dhabi Global Market law.

Key Responsibilities

• Act as a trusted advisor for data privacy across all jurisdictions in which Shearman & Sterling operates.

• Be a day-to-day contact for data privacy queries and issues from the business, providing subject matter expert support.

• Work closely with the Director of Data Privacy and business leadership teams providing strategic advice on data privacy policies, processes and procedures for the business units to follow, overseeing controls and monitoring compliance.

• Manage core data privacy programme workstreams to deliver essential compliance milestones and objectives, ensuring compliance with data privacy laws, regulation and best-practice.

• Undertake horizon-scanning for developments in the data privacy environment and develop proactive adjustments to the privacy programme.

• Lead privacy-related projects and advise on broader firm projects involving personal data.

• Negotiate data privacy terms for client engagements and vendor contracts, including international data transfer terms.

• Support the due diligence risk review of new or changing technology, vendors and business processes, embedding Privacy by Design principles and performing Data Protection Impact Assessments as needed.

• Handle communications with regulators, third parties and data subjects, including responding to data subject access requests with required deadlines.

• Actively participate in the firm’s management of personal data breaches, including ensuring we are able to meet any breach notification requirements.

• Give direction to and manage other members of the Data Privacy team, including data privacy consultants.

• Undertake data privacy training and awareness raising across the business.

• Implement controls and monitoring of privacy-related activities in line with the firm’s policies to test the firm’s compliance, developing remedial plans where required.

• Report programme progress and compliance findings in a structural, transparent and business-relevant manner to senior management.

Required Knowledge & Attributes

• Excellent working knowledge of data privacy laws, regulation and best-practice across the jurisdictions in which Shearman & Sterling operates, including the UK and EU GDPR.

• Extensive experience drafting and negotiating commercial transactions, privacy policies and notices.

• Qualified lawyer, with significant data privacy experience, a minimum 4 PQE.

• Qualified in data protection law and regulation e.g., holding one or more data privacy industry recognised certificates.

• Knowledge of information security and its importance to a data privacy programme.

• Track record of leading privacy compliance programme workstreams and privacy projects.

• Used to acting as a ’trusted advisor’ to business leaders and teams, skilled in guiding them through complex and challenging data privacy issues.

• Experience working in an in-house counsel role and in an international / global team advantageous.

• Experience managing consultants and other team members advantageous.

Additional Person Specification

• Confident, dynamic and a self-starter with solid organisational skills.

• Strong written and verbal communication and interpersonal skills.

• Ability to solve problems creatively and effectively presenting practical risk-based solutions.

• Comfortable managing relationships and engaging with senior stakeholders across multiple geographies and teams.

• Proactively take responsibility for delivering projects.

• Ability to work under pressure in a fast-paced, rapidly changing environment.