Summary
Imagine Learning seeks an India-based attorney to support the Legal and Privacy teams on U.S. data privacy and regulatory compliance matters. The ideal candidate will have a strong working knowledge of U.S. federal and state privacy frameworks, with an emphasis on education technology and children's data. This role will involve reviewing customer and vendor agreements, data processing agreements, privacy impact assessments, and cross-border data transfer issues.

Key Responsibilities

• Review and draft data processing agreements (DPAs), privacy addenda, and both customer and vendor contracts for compliance with applicable U.S. privacy laws.
• Support privacy impact assessments, data subject access requests, and incident response activities.
• Review customer-facing terms of service, end-user license agreements, and subscription agreements for privacy compliance.
• Monitor and analyze evolving U.S. state privacy legislation and advise on compliance obligations.
• Collaborate with Privacy, Legal, IT, and Vendor Management teams on risk assessments and policy development.

Required Knowledge Specific Laws & Regulations

• FERPA (Family Educational Rights and Privacy Act)
• COPPA (Children's Online Privacy Protection Act) 
• HIPAA (Health Insurance Portability and Accountability Act)
• CCPA / CPRA (California Consumer Privacy Act / California Privacy Rights Act)
• GDPR / UK GDPR

Qualifications

• Indian law degree (LL.B. or equivalent); or J.D. in U.S. with privacy/technology law preferred.
• 35 years of experience in data privacy, technology transactions, or regulatory compliance, with demonstrable exposure to U.S. privacy frameworks.
• Familiarity with privacy certifications (CIPP/US, CIPP/E, CIPM) preferred.
• Experience reviewing or negotiating SaaS agreements, DPAs, customer contracts, and vendor contracts.
• Strong written and verbal English communication skills.
• Ability to partially work across U.S. time zones as needed.