Data Protection Legal Counsel - volunteer position at HHP



Time Commitment

A few hours per week


Long-Term (6 months-1 year)


2271 Vandalia Avenue
Los Angeles
United States


Human Health Project (HHP) is a global nonprofit organization dedicated to helping individuals increase their health knowledge through the sharing of health information. HHP collects, analyzes, and shares health information to empower and inform individuals to achieve better health outcomes. Our patient-centered approach enables patients and caregivers to choose treatments based on evidence-based clinical data as well as the cumulative knowledge of the HHP community.

For more Information about HHP, please visit our website:

Data Protection Legal Counsel

* Provide legal advice to HHP on the full range data protection issues as well as select information security / cybersecurity issues 

* Work with technology and other stakeholders to build-out the existing privacy program 

* Prepare / assist in the preparation of privacy impact assessments 

* Review data leakage incidents and make determination as to whether any notifications are required. Draft / review and submit such notifications 

* Prepare and submit data protection notifications / registration with applicable data protection authorities 

* Advise colleagues in the Employment Law Group on matters pertaining to employee privacy (including subject access requests, monitoring programs, notice and consent requirements) 

* Review and as needed uplift existing policies and procedures regarding data protections, Draft / review new policies, procedure, best practice documents, as needed 

* Review and negotiate data protection and information security terms in vendor agreements, confidentiality agreements, etc. 

* Prepare data protection-related training materials for use online

* Liaise with colleagues in the US and EU to promote consistent data protection / privacy practices globally 

* Monitor and respond to developments in privacy and information security (i.e., new laws, regulations, important case decisions, regulatory guidance, etc.) 

* Advise on privacy issues arising from the full range of marketing efforts and Web-related advertising activities: 


* Legal degree / qualification (can be US/EU) 

* Minimum 5 years solid experience with data protection laws 

* Background or demonstrated interest in technology a plus 

* Experience drafting policies, procedures, notices and consents 

* CIPP (Certified Information Privacy Professional) accreditation a plus 

* Good leadership skills, demonstrated project management experience 

* Must be comfortable taking the initiative and working with minimal supervision 

* Effective communicator; experience preparing and conducting data protection training



We welcome

International Volunteers

How To Apply

Opportunity Contact