Responsibilities

Handshake is seeking a Privacy Associate to support the day-to-day execution of our global privacy program. As part of Handshake's Legal team, you will report to the Senior Director & Counsel, Compliance, and work closely with Security, Finance, Product, and Engineering to review new products and vendors, respond to inquiries, maintain program records, and put privacy requirements into practice.
This is a hands-on opportunity to build experience across a broad range of privacy activities, including AI governance, while taking ownership of recurring workflows. We're looking for someone organized and practical, with strong follow-through and the judgment to recognize when an issue needs legal review.
Vendor and subprocessor management. Assess vendors' data handling practices, review DPAs, coordinate with cross-functional partners on findings, and escalate exceptions. Maintain subprocessor records and disclosures, coordinate required notices, and track diligence requirements.
Assessments and records. Support the preparation and review of DPIAs, LIAs, and TIAs, gathering information from business owners, documenting findings, and tracking mitigation actions with guidance from the Privacy Program Manager. Keep RoPAs, data inventories, and retention schedules current as products and systems change, and coordinate retention and deletion with business owners.
Consent and tracking technologies. Own day-to-day administration of Ketch, our privacy rights and consent platform. Maintain consent experiences, purposes, and jurisdiction-specific rules, including honoring Global Privacy Control and other universal opt-out signals. Run regular consent testing and cookie and tag scans, and work with Marketing and Engineering to categorize tracking technologies, resolve compliance issues, and deploy configuration changes.
Individual rights. Working with Ketch, keep our automated rights request process accurate and reliable. Monitor workflows and deadlines, handle exceptions that automation can’t resolve, spot-check fulfillment across connected systems, and partner with Engineering to resolve integration issues. Track request volume and turnaround times, and recommend workflow improvements.
Customer audits and inquiries. Prepare responses to customer questionnaires and audits, coordinate evidence collection, and help Sales and Customer Success answer privacy questions. Maintain accurate, approved response materials.
Incident response support. Assist with breach triage, notification analysis, and post-incident documentation alongside Security.
Notices, policies, and regulatory monitoring. Draft and update privacy notices and the public privacy policy as products, practices, and laws change. Track new and amended privacy and AI laws, and summarize what changed and what it means for Handshake.
Product and AI review support. Support the privacy team’s review of new features and AI-enabled functionality by logging launch intake, gathering data flow information, and tracking follow-up items, escalating questions to counsel and the Privacy Program Manager.
Training and awareness. Help deliver privacy training and keep internal guidance current, with a focus on the teams that handle student and customer data most often.
Day-to-day support and program operations. Monitor the privacy inbox and internal Slack channels, respond to routine questions, and escalate complex or sensitive matters promptly. Track assessments, requests, and follow-up actions, prepare metrics and status updates, and recommend improvements to recurring processes.

Privacy Associate at Handshake · LumiJobs

Privacy Associate

Responsibilities

Qualification

Preferred

Benefits

Company

Handshake

More roles at Handshake