ACM Data Privacy Operations Associate in ROCHESTER, New York at Rochester Regional Health

Job Title: Data Privacy Operations Associate

Department: Quality Assurance

Location: Remote

Hours Per Week: 40

Schedule: Monday - Friday

SUMMARY
The Data Privacy Operations Associate plays a key role in supporting the Global Data Privacy department by contributing to a wide range of privacy, regulatory, and compliance initiatives. This position is responsible for assisting with data privacy matters, contract review, and governance processes, while ensuring alignment with applicable laws and organizational policies.

KEY RESPONSIBILITIES

• Manage and help oversee Data Processing Agreements

• Gather information about existing and new data processing information including but not limited to client and vendor agreements

• Manage, track, index and monitor the status of all existing data processing and new contracts involving privacy issues or personal information

• Track, manage, and organize privacy-related requests for information (RFI), and client questionnaires

• Gather information needed from other departments to assist the DPO in documenting ACM’s privacy program.

• Assist with updating ACM policies, procedures, and training materials related to the handling of personal information; maintaining an overall index of privacy program materials; and interviewing other team members about their current practices

• Assist with various projects to support ACM’s compliance with applicable privacy laws,

• Work with cross-functional teams to help update data retention policies and procedures; assist with ACM’s data inventory maintenance; and help the business understand and operationalize new legal requirements

• Support the DPO in addressing data subject access requests or data privacy litigation matters by compiling, reviewing and organizing the necessary documentation.

• Monitor ACM data privacy data mapping and assessments and to keep up to date with current data privacy regulations.

• Partner with legal and compliance team members, and the Information Security team, to support ACM’s Privacy Impact Assessment process, and other projects tied to privacy and legal issues at ACM.

• Provide high-level administrative and executive support to the Global Data Privacy Officer (DPO), including calendar coordination, meeting preparation, document organization, scheduling, follow-up tracking, and management of confidential materials.

• Coordinate cross-functional meetings, maintain project timelines, track deliverables, and ensure timely completion of privacy and compliance initiatives.

• Leverage AI-enabled productivity and research tools to assist with document review, legal research, workflow organization, meeting summaries, data analysis, and administrative efficiencies while maintaining confidentiality and compliance standards.

• Develop and maintain organized filing systems, tracking tools, spreadsheets, dashboards, and status reports to support operational efficiency and executive-level reporting

• Conduct routine and specific legal and factual information research and data compilation

• Assist with regulatory research and external communications related to legal matters

• Assist with other projects and duties as assigned

MINIMUM QUALIFICATIONS

• Bachelor’s degree or paralegal certificate required

• 3 years corporate administrative, secretarial, or legal paralegal experience

DESIRED QUALIFICATIONS

• One or more International Association of Privacy Professionals (IAPP) certifications strongly preferred: CIPP/US, CIPP/E, CIPM, CIPT, and/or AIGP (Artificial Intelligence Governance Professional)

• Proficient with modern office (MS Word, Excel, PowerPoint, SharePoint)

• Experience with electronic research/database tools such as OneTrust and Westlaw

• Exceptional oral and written communication skills

• Ability to negotiate and interact professionally with colleagues, vendors, and customers

• Strong organisational skills and the ability to manage multiple tasks and priorities effectively

• Strong background in compliance, privacy, or related clinical trial field

• Solid understanding of GDPR, CCPA/CPRA, and general data protection principles

• Proven ability in project management and research

• Experience in AI governance, responsible AI, or emerging AI regulatory compliance are strongly preferred.