Job Title: Data Privacy Operations Associate
Department: Quality Assurance
Location: Remote
Hours Per Week: 40
Schedule: Monday - Friday
SUMMARY
The Data Privacy Operations Associate plays a key role in supporting the Global Data Privacy department by contributing to a wide range of privacy, regulatory, and compliance initiatives. This position is responsible for assisting with data privacy matters, contract review, and governance processes, while ensuring alignment with applicable laws and organizational policies.
KEY RESPONSIBILITIES
Manage and help oversee Data Processing Agreements
Gather information about existing and new data processing information including but not limited to client and vendor agreements
Manage, track, index and monitor the status of all existing data processing and new contracts involving privacy issues or personal information
Track, manage, and organize privacy-related requests for information (RFI), and client questionnaires
Gather information needed from other departments to assist the DPO in documenting ACM’s privacy program.
Assist with updating ACM policies, procedures, and training materials related to the handling of personal information; maintaining an overall index of privacy program materials; and interviewing other team members about their current practices
Assist with various projects to support ACM’s compliance with applicable privacy laws,
Work with cross-functional teams to help update data retention policies and procedures; assist with ACM’s data inventory maintenance; and help the business understand and operationalize new legal requirements
Support the DPO in addressing data subject access requests or data privacy litigation matters by compiling, reviewing and organizing the necessary documentation.
Monitor ACM data privacy data mapping and assessments and to keep up to date with current data privacy regulations.
Partner with legal and compliance team members, and the Information Security team, to support ACM’s Privacy Impact Assessment process, and other projects tied to privacy and legal issues at ACM.
Provide high-level administrative and executive support to the Global Data Privacy Officer (DPO), including calendar coordination, meeting preparation, document organization, scheduling, follow-up tracking, and management of confidential materials.
Coordinate cross-functional meetings, maintain project timelines, track deliverables, and ensure timely completion of privacy and compliance initiatives.
Leverage AI-enabled productivity and research tools to assist with document review, legal research, workflow organization, meeting summaries, data analysis, and administrative efficiencies while maintaining confidentiality and compliance standards.
Develop and maintain organized filing systems, tracking tools, spreadsheets, dashboards, and status reports to support operational efficiency and executive-level reporting
Conduct routine and specific legal and factual information research and data compilation
Assist with regulatory research and external communications related to legal matters
Assist with other projects and duties as assigned
MINIMUM QUALIFICATIONS
Bachelor’s degree or paralegal certificate required
3 years corporate administrative, secretarial, or legal paralegal experience
DESIRED QUALIFICATIONS
One or more International Association of Privacy Professionals (IAPP) certifications strongly preferred: CIPP/US, CIPP/E, CIPM, CIPT, and/or AIGP (Artificial Intelligence Governance Professional)
Proficient with modern office (MS Word, Excel, PowerPoint, SharePoint)
Experience with electronic research/database tools such as OneTrust and Westlaw
Exceptional oral and written communication skills
Ability to negotiate and interact professionally with colleagues, vendors, and customers
Strong organisational skills and the ability to manage multiple tasks and priorities effectively
Strong background in compliance, privacy, or related clinical trial field
Solid understanding of GDPR, CCPA/CPRA, and general data protection principles
Proven ability in project management and research
Experience in AI governance, responsible AI, or emerging AI regulatory compliance are strongly preferred.
EDUCATION:
LICENSES / CERTIFICATIONS:
PHYSICAL REQUIREMENTS:
S - Sedentary Work - Exerting up to 10 pounds of force occasionally Sedentary work involves sitting most of the time, but may involve walking or standing for brief periods of time. Jobs are sedentary if walking and standing are required only occasionally and all other sedentary criteria are met.For disease specific care programs refer to the program specific requirements of the department for further specifications on experience and educational expectations, including continuing education requirements.
Any physical requirements reported by a prospective employee and/or employee’s physician or delegate will be considered for accommodations.
PAY RANGE:
$32.00 - $38.00CITY:
POSTAL CODE:
The listed base pay range is a good faith representation of current potential base pay for a successful full time applicant. It may be modified in the future and eligible for additional pay components. Pay is determined by factors including experience, relevant qualifications, specialty, internal equity, location, and contracts.
Rochester Regional Health is an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, creed, religion, sex (including pregnancy, childbirth, and related medical conditions), sexual orientation, gender identity or expression, national origin, age, disability, predisposing genetic characteristics, marital or familial status, military or veteran status, citizenship or immigration status, or any other characteristic protected by federal, state, or local law.
Skills Required
- Bachelor's degree or paralegal certificate
- 3 years corporate administrative, secretarial, or legal paralegal experience
- IAPP certifications (CIPP/US, CIPP/E, CIPM, CIPT, AIGP)
- Proficient with MS Word, Excel, PowerPoint, SharePoint
- Experience with OneTrust and Westlaw
- Exceptional oral and written communication skills
- Strong organizational skills and ability to manage multiple priorities
- Understanding of GDPR, CCPA/CPRA, and general data protection principles
- Background in compliance, privacy, or related clinical trial field
- Experience in AI governance, responsible AI, or emerging AI regulatory compliance
- Proven project management and research abilities
What We Do
Rochester Regional Health is an integrated health services organization that provides a wide range of medical care, including hospital services, primary and specialty practices, and laboratory services across Western New York and the Finger Lakes region.
