Data Privacy Lawyer

Description

We are looking for a Data Privacy Lawyer to join our Legal team in a fully remote role.

The successful candidate should have 1-3 years of relevant legal experience and practical knowledge of data protection and privacy requirements in the United States, the European Union, and the United Kingdom. Experience with privacy laws in other jurisdictions would be an advantage.

About FORM

FORM powers the world’s two billion mobile workers as they change companies and industries for good, with mobile technology that improves execution from the frontline. FORM solutions include the AI-enabled task management platform GoSpotCheck, Trax’s image recognition technology, and FORM OpX, all of which activate and connect teams in the field – with leaders, missions, and each other – so they can deliver success in the enterprise. With more than 25 years of experience, FORM supports 100,000+ global users from some of the world’s more recognizable global brands in 45 countries.

Requirements

What You'll Do:

• Advise internal teams on data protection and privacy requirements worldwide.
• Monitor and assess developments under the GDPR, UK GDPR, US federal and state privacy laws, and other applicable privacy regulations.
• Draft, review, and update privacy notices, cookie policies, consent wording, internal policies, and data protection procedures.
• Draft and review Data Processing Agreements, Standard Contractual Clauses, international data transfer documentation, privacy provisions in commercial agreements, and vendor contracts.
• Support the preparation and maintenance of Records of Processing Activities, data maps, data retention schedules, and other compliance documentation.
• Assist with Data Protection Impact Assessments, Legitimate Interest Assessments, transfer risk assessments, and privacy risk reviews.
• Review new products, features, technologies, and business processes from a privacy-by-design and privacy-by-default perspective.
• Support the handling of data subject requests.
• Assist with the assessment and management of personal data breaches.
• Conduct privacy reviews of vendors, service providers, clients, and business partners.
• Support compliance with international data transfer requirements.
• Prepare practical legal guidance, templates, training materials, and internal updates on privacy and data protection matters.
• Work with business and technical teams to identify privacy risks and implement appropriate mitigation measures.

What We’re Looking For:

• A university degree in law.
• 1-3 years of professional legal experience in data protection, privacy compliance or a related field.
• Practical experience advising on data protection matters in the United States, European Union and other jurisdictions.
• Strong working knowledge of the GDPR and UK GDPR.
• Familiarity with relevant US privacy laws, including state-level privacy requirements such as the CCPA and CPRA.
• Experience drafting or reviewing privacy notices, Data Processing Agreements, privacy clauses, consent wording, and other privacy-related documents.
• Familiarity with DPIAs, Records of Processing Activities, data subject requests, international data transfers, and personal data breach procedures.
• Ability to understand complex legal requirements and provide clear, practical, and business-oriented advice.
• Strong legal research, drafting, analytical, and communication skills.
• English at Upper-Intermediate level or higher, with the ability to draft and review legal documents and communicate with international stakeholders.
• Ability to work independently and effectively in a fully remote environment.
• Strong organizational skills, attention to detail, and the ability to manage multiple tasks and deadlines.

Beneficial would be:

• Experience with data protection and privacy laws in jurisdictions outside the United States, European Union, and United Kingdom.
• Experience in an IT company, international law firm, or privacy consultancy.
• Experience supporting SaaS products, mobile applications, websites, cloud services, analytics, marketing technologies, cookies, or artificial intelligence solutions.
• Knowledge of information security and cybersecurity frameworks such as ISO 27001, ISO 27701, or SOC 2.
• A privacy-related certification, or progress toward a certification, such as CIPP/E, CIPP/US, CIPM, or CIPT.

What We Offer:

• Fully remote collaboration format.
• Private healthcare and life insurance.
• Company-subsidized online English classes.
• Access to internal learning and development resources.
• Opportunities for professional growth within a global team.
• Necessary project equipment provided.