Privacy Attorney

Job Posting Organization:
The organization is the largest nonprofit dedicated to fighting poverty, disease, and inequity globally. Founded on the principle that everyone, regardless of their identity or circumstances, should have the opportunity to lead healthy and productive lives, the foundation emphasizes the importance of diversity among its employees to reflect the global populations it serves. The foundation offers an exceptional benefits package that includes comprehensive medical, dental, and vision coverage with no premiums, generous paid time off, paid family leave, retirement contributions funded by the foundation, regional holidays, and opportunities for employees to engage in various community initiatives. The organization is committed to fostering an environment where employees can thrive both personally and professionally, ensuring that they are supported in their roles and encouraged to contribute to the foundation's mission.

Job Overview:
The Privacy Attorney will play a crucial role in supporting the foundation's enterprise data privacy program. This position involves providing legal guidance across the foundation and its subsidiaries, which include the Gates Medical Research Institute, Gates Philanthropic Partners, and Gates Agricultural Innovations. The attorney will be responsible for advising on processes, transactions, and initiatives related to personal data, data access and sharing, information management, and data governance. The role requires collaboration with various teams to develop and implement strategies and technologies that enhance operational effectiveness and enable charitable impact. The attorney will also be expected to support global compliance, policy development, and legal guidance on data privacy issues, ensuring that the foundation adheres to legal requirements while promoting efficiency and scalability in its operations.

Duties and Responsibilities:
The Privacy Attorney will support a global data privacy program, which includes ensuring compliance with relevant laws and regulations, developing policies and guidance, managing data subject requests, and conducting data impact assessments. The attorney will continuously identify and implement improvements to enhance the maturity and efficiency of the data privacy program. Responsibilities also include providing tactical and strategic legal guidance on personal data processing, translating legal requirements into practical policies, reviewing and negotiating data-related agreements, and developing training programs for staff across all functions and levels. The attorney will collaborate with technical and operational teams to integrate privacy principles into practical solutions and will utilize AI/ML tools to streamline processes and enhance productivity.

Required Qualifications:
Candidates must possess a JD degree and be a member of the bar in good standing. A minimum of 15 years of legal experience is required, with a primary focus on data privacy. Extensive experience in leading or advising global data privacy programs is essential, along with familiarity with GDPR/UK GDPR and at least one major US data protection framework, such as HIPAA or FERPA. Candidates should have demonstrated experience in negotiating data-related transactions and managing outside counsel across jurisdictions. The ability to develop and deliver engaging training and translate legal requirements into practical guidance is also necessary. Strong interpersonal skills, sound judgment, and the ability to communicate effectively with diverse audiences are critical attributes for this role.

Educational Background:
The position requires a Juris Doctor (JD) degree from an accredited law school. Candidates must also hold a current bar membership in good standing, which is essential for practicing law in the relevant jurisdiction.

Experience:
The ideal candidate will have at least 15 years of legal experience, specifically focusing on data privacy. This experience should include extensive involvement in leading or advising on global data privacy programs and familiarity with various data protection frameworks. Candidates should have a proven track record of negotiating complex transactions involving data and managing legal risks effectively.

Languages:
While the job description does not specify mandatory languages, proficiency in English is implied as it is the primary language of communication within the organization. Additional language skills may be beneficial, particularly in regions where the foundation operates.

Additional Notes:
The position is based in Seattle, and candidates must be legally authorized to work in the United States without requiring visa sponsorship. The salary range for this role is between $261,700 and $405,700 USD, with specific adjustments for high-wage markets like Seattle and Washington D.C., where the range is $285,300 to $442,100 USD. The organization aims to balance competitive pay with its mission, and new hires typically fall within the range minimum and midpoint based on their skills and experience. The hiring process includes a standard background check, and the foundation is committed to diversity, equity, and inclusion in its employment practices.