Lateral Data Privacy and Cyber Security Partner or Of Counsel

A law firm in Albany, NY, is seeking a Lateral Data Privacy and Cyber Security Partner or Of Counsel with at least 8 years of experience and an established, portable business in data privacy and cyber security. The selected candidate will lead a Privacy, Cybersecurity, and Information Management practice. They should have expertise in negotiating and drafting contracts related to privacy, cybersecurity, data licensing, technology outsourcing, and intellectual property, including business associate agreements (BAAs). The role includes responsibilities such as drafting and implementing privacy, cybersecurity, and information-related policies, conducting risk assessments, and managing data protection impact analyses (DPIAs). Other areas of expertise desired include security incident and data breach response, cyber insurance coverage analysis, litigation involving unauthorized computer access and data theft, due diligence in M&A transactions, and advising on international data transfers under the GDPR. The candidate should have the ability to obtain business in the field and must be admitted to practice in New York. Partnership and of counsel relationships will be considered, with admission to partnership requiring the demonstration of at least $400,000 in portable business.

Duties:

• Lead a Privacy, Cybersecurity, and Information Management practice.
• Negotiate and draft contracts involving privacy, cybersecurity, data licensing, technology outsourcing, and intellectual property, including business associate agreements (BAAs).
• Draft and implement privacy, cybersecurity, computer use, social media, and information-related policies and procedures.
• Conduct risk assessments and data protection impact analyses (DPIAs).
• Manage security incidents and data breach responses.
• Analyze cyber insurance coverage and handle claim disputes.
• Handle litigation involving unauthorized computer access and data theft.
• Provide privacy, cybersecurity, and data-related due diligence for M&A transactions.
• Respond to individual data subject access requests.
• Respond to subpoenas, search warrants, and other demands for legally protected information.
• Advise on international data transfers under the GDPR.
• Demonstrate an ability to obtain business in the field.

Requirements:

• Juris Doctor (J.D.) degree from an accredited law school.
• Active admission to practice law in the state of New York.
• At least 8 years of experience in data privacy and cyber security law.
• Established portable business in the field.
• Demonstrated ability to obtain business in the field (for consideration of admission to partnership).
• Strong legal negotiation and drafting skills.
• Expertise in privacy, cybersecurity, and data protection policies and procedures.
• Knowledge of cyber insurance coverage and data breach response.
• Legal research and analytical skills.
• Strong business development skills.
• Exceptional written and oral communication skills.

Certifications:

• Admission to practice law in the state of New York.

Skills:

• Data privacy and cyber security expertise.
• Contract negotiation and drafting.
• Policy and procedure development.
• Risk assessment and data protection impact analysis.
• Cyber insurance coverage analysis.
• Legal research and analysis.
• Business development and client acquisition.

The principal law office is based in New York. A second office is located in Pennsylvania. Practice areas are comprehensive. Banking-finance, clean tech, environmental, health care, litigation, arbitration and mediation are some of their practice disciplines. A team of professional attorneys make up their law firm.