Note: The job is a remote job and is open to candidates in USA. Rochester Regional Health is seeking a Data Privacy Operations Associate to support their Global Data Privacy department. The role involves assisting with data privacy matters, contract review, and governance processes while ensuring compliance with applicable laws and organizational policies.
Responsibilities
- Manage and help oversee Data Processing Agreements
- Gather information about existing and new data processing information including but not limited to client and vendor agreements
- Manage, track, index and monitor the status of all existing data processing and new contracts involving privacy issues or personal information
- Track, manage, and organize privacy-related requests for information (RFI), and client questionnaires
- Gather information needed from other departments to assist the DPO in documenting ACM’s privacy program
- Assist with updating ACM policies, procedures, and training materials related to the handling of personal information; maintaining an overall index of privacy program materials; and interviewing other team members about their current practices
- Assist with various projects to support ACM’s compliance with applicable privacy laws
- Work with cross-functional teams to help update data retention policies and procedures; assist with ACM’s data inventory maintenance; and help the business understand and operationalize new legal requirements
- Support the DPO in addressing data subject access requests or data privacy litigation matters by compiling, reviewing and organizing the necessary documentation
- Monitor ACM data privacy data mapping and assessments and to keep up to date with current data privacy regulations
- Partner with legal and compliance team members, and the Information Security team, to support ACM’s Privacy Impact Assessment process, and other projects tied to privacy and legal issues at ACM
- Provide high-level administrative and executive support to the Global Data Privacy Officer (DPO), including calendar coordination, meeting preparation, document organization, scheduling, follow-up tracking, and management of confidential materials
- Coordinate cross-functional meetings, maintain project timelines, track deliverables, and ensure timely completion of privacy and compliance initiatives
- Leverage AI-enabled productivity and research tools to assist with document review, legal research, workflow organization, meeting summaries, data analysis, and administrative efficiencies while maintaining confidentiality and compliance standards
- Develop and maintain organized filing systems, tracking tools, spreadsheets, dashboards, and status reports to support operational efficiency and executive-level reporting
- Conduct routine and specific legal and factual information research and data compilation
- Assist with regulatory research and external communications related to legal matters
- Assist with other projects and duties as assigned
Skills
- Bachelor's degree or paralegal certificate required
- 3 years corporate administrative, secretarial, or legal paralegal experience
- Proficient with modern office (MS Word, Excel, PowerPoint, SharePoint)
- Experience with electronic research/database tools such as OneTrust and Westlaw
- Exceptional oral and written communication skills
- Ability to negotiate and interact professionally with colleagues, vendors, and customers
- Strong organisational skills and the ability to manage multiple tasks and priorities effectively
- Strong background in compliance, privacy, or related clinical trial field
- Solid understanding of GDPR, CCPA/CPRA, and general data protection principles
- Proven ability in project management and research
- One or more International Association of Privacy Professionals (IAPP) certifications strongly preferred: CIPP/US, CIPP/E, CIPM, CIPT, and/or AIGP (Artificial Intelligence Governance Professional)
- Experience in AI governance, responsible AI, or emerging AI regulatory compliance are strongly preferred
Company Overview