Advise on North American privacy and data protection laws, including CCPA, as amended, PIPEDA, HIPAA, and GDPR and other relevant laws, rules and regulations pertaining to consumer privacy, data security and emerging technologies such as artificial intelligence.
Provide legal guidance on AI-related issues, including compliance with laws regulating automated decision-making, algorithmic transparency, and the use of artificial intelligence for consumer profiling and inference generation.
Draft, review, and negotiate legal agreements with privacy and artificial intelligence implications, including data protection agreements, data protection impact assessments, technology contracts, artificial intelligence development/vendor agreements and other relevant documents.
Comprise part of triage incident response team and manage responses to cybersecurity incidents, investigations, and compliance matters in collaboration with the Chief Information Officer, Chief Information Security Officer, and Information Security Team.
Monitor and analyze legal developments in privacy and artificial intelligence to identify potential risks and opportunities, ensuring the organization remains proactive in adapting to regulatory changes. Develop and update corporate policies related to privacy, cybersecurity, records retention, the ethical use of artificial intelligence technologies, and data governance.