Mid-level Data Privacy Attorney

Job not on LinkedIn

🕒 June 11

Apply Now

Find Similar Remote Jobs

Set Up Email Alert For New Jobs

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Upload Resume

DaVita Colombia

WebsiteLinkedInAll Job Openings

1001 - 5000 employees

🏥 Healthcare

👥 B2C

🤝 B2B

Healthcare • B2C • B2B

DaVita Colombia is a healthcare provider specializing in kidney care and renal services in Colombia, offering dialysis (hemodialysis and peritoneal dialysis), nephrology, integrated care, telemedicine, patient education, and hospital-based renal support through a national network of renal care centers and partnerships with clinics and hospitals.

📋 Description

• Policy Management and Training: Review and update internal privacy policies (LGPD), draft operational procedures, develop training and awareness campaigns, and monitor the effectiveness of these initiatives using performance indicators. • Contract Review: Review contracts with vendors and partners to identify and negotiate data protection clauses (DPAs), ensure proper allocation of responsibilities between controller and processor, and advise internal teams on privacy requirements in contracting. • Opinions on Data Sharing: Analyze and issue technical opinions on requests to share data with public authorities and healthcare agreements, evaluating legal bases, risks and conditions permitted under the LGPD, with special attention to the processing of sensitive data. • Vendor Privacy Risk Assessment: Conduct privacy due diligence on vendors that process personal data, administer assessment questionnaires, identify vulnerabilities, and follow up on remediation and compliance plans. • Data Mapping and DPIAs: Keep the record of processing activities (RoPA) up to date, conduct Data Protection Impact Assessments (DPIAs) for high-risk processes and projects, identify compliance gaps and propose mitigating measures. • Incident Response and Internal Investigations: Support the management of security incidents involving personal data, assess impact, trigger notifications to the ANPD and data subjects when necessary, and conduct investigations of internal non-compliance with documentation and follow-up action plans.

🎯 Requirements

• Law degree; • Previous experience with internal privacy policies (LGPD); • Active OAB registration (Brazilian Bar Association); • Postgraduate degree in digital law or data protection and relevant certifications are a plus.

🏖️ Benefits

• Health Insurance: to care for you and your family’s well-being. "Because health is what matters." • Dental Plan: to keep your smile in excellent condition. • Commuter Allowance: to facilitate your commute. • Meal and Food Vouchers: to support your grocery and meal expenses.