This is a partner-track position focused on counseling businesses on major global and U.S. data protection frameworks, the behind-the-scenes workings of the Internet, AI systems, and privacy and regulatory compliance, providing legal advice almost exclusively on data protection matters.
Experience includes handling regulatory investigations or litigation involving consumer protection issues (State AG, FTC, and other regulatory agencies), and/or defending data privacy and security class actions (e.g., Stored Communications Act, wiretapping claims, allegedly unfair and deceptive trade practices, data breach class actions).
Assist companies with compliance issues related to the CCPA and other state privacy laws, the FTC Act, GDPR, and other global privacy laws and regulations; working knowledge of HIPAA, FCRA, GLBA, COPPA, TCPA, and CAN-SPAM is expected.
Draft and revise privacy notices, terms of service, incident response plans, information security policies, other data protection policies, and commercial agreements involving data sharing (e.g., professional services, vendor/service provider, data processing, cross-border transfer agreements).
Respond to regulatory inquiries or investigations concerning privacy compliance and data breaches, and drive data breach preparation, risk mitigation, coordination, and responses.
Work on corporate transactions in relation to privacy and security-related due diligence and advising.
Familiarity with establishing AI governance programs and policies, the EU AI Act, and U.S. federal and state-level artificial intelligence and automated decision-making/profiling laws and regulations is desired.
Differentiating requirements include general tech fluency, the ability to engage directly with clients and lead significant projects, and previous or current employment with an Am Law 100 firm is desired.
Additional consideration is given for sector-specific experience in financial services, children’s privacy, telecom, biometrics, genetics, or digital advertising.

Pillsbury Winthrop Shaw Pittman LLP

Midlevel/Senior Data Privacy & Regulatory (Consumer Protection) Associate

5-6 PQE · March 23, 2026 (5 months ago)

Pillsbury Winthrop Shaw Pittman LLP

5-6 PQE · March 23, 2026 (5 months ago)

Salary

$365,000 - $390,000

Employment type

Full-time

Practice area

Data Privacy · Compliance/Regulatory · Data Privacy · Litigation

Location

San Francisco

Trusted recruiters

Work with a recruiter who has a real relationship with the hiring team and comes recommended by your peers.

Overview

This is a partner-track position focused on counseling businesses on major global and U.S. data protection frameworks, the behind-the-scenes workings of the Internet, AI systems, and privacy and regulatory compliance, providing legal advice almost exclusively on data protection matters.
Experience includes handling regulatory investigations or litigation involving consumer protection issues (State AG, FTC, and other regulatory agencies), and/or defending data privacy and security class actions (e.g., Stored Communications Act, wiretapping claims, allegedly unfair and deceptive trade practices, data breach class actions).
Assist companies with compliance issues related to the CCPA and other state privacy laws, the FTC Act, GDPR, and other global privacy laws and regulations; working knowledge of HIPAA, FCRA, GLBA, COPPA, TCPA, and CAN-SPAM is expected.
Draft and revise privacy notices, terms of service, incident response plans, information security policies, other data protection policies, and commercial agreements involving data sharing (e.g., professional services, vendor/service provider, data processing, cross-border transfer agreements).
Respond to regulatory inquiries or investigations concerning privacy compliance and data breaches, and drive data breach preparation, risk mitigation, coordination, and responses.
Work on corporate transactions in relation to privacy and security-related due diligence and advising.
Familiarity with establishing AI governance programs and policies, the EU AI Act, and U.S. federal and state-level artificial intelligence and automated decision-making/profiling laws and regulations is desired.
Differentiating requirements include general tech fluency, the ability to engage directly with clients and lead significant projects, and previous or current employment with an Am Law 100 firm is desired.
Additional consideration is given for sector-specific experience in financial services, children’s privacy, telecom, biometrics, genetics, or digital advertising.

Trusted recruiters

Top recruiter for this opening
Alice Lingo
David Carrie LLC
Alice Lingo
David Carrie LLC
Christine Mastromonaco joined Pillsbury’s San Francisco office in the Compliance/Regulatory group.
I cannot say enough about Alice’s diligence, responsiveness and in-depth knowledge about the legal market. I would highly recommend Alice to any of my friends considering a lateral move.

View this job posting on the firm's site.

Last updated: August 25, 2026

Data Privacy in San Francisco →Data Privacy →Pillsbury →Browse all positions →