Data Privacy Legal Associate

The Data Privacy Legal Associate responsibilities will include, but are not limited to: Horizon Scanning Continuously monitoring and assessing upcoming trends, regulatory changes, and emerging technologies that could affect the handling, protection, and compliance of personal data. Third Party Risk Management Evaluating and mitigating risks when sharing personal data with external parties, ensuring their compliance with privacy regulations and safeguarding data from breaches. Ensuring the inclusion of NEOMs data privacy contractual provisions (such as data processing agreements, data transfer agreements and data protection clauses) into agreements with clients / third parties and supporting the negotiation of these. Reviewing third parties data privacy contractual provisions and supporting the negotiation of these to protect NEOMs position. Transfer Impact Assessments Identify and address any privacy-related challenges or compliance issues to ensuring that data transfers to different jurisdictions are conducted in a manner that safeguards individuals' privacy and complies with relevant regulations. Implement standard contractual clauses or other applicable contractual tools in contracts to ensure compliance. Legal Interpretations Clarifying the specific legal requirements, obligations, and implications related to the handling, processing, and protection of personal data Intra Company Transfer Agreements Drafting clear terms for sharing data between NEOM Group companies, monitoring adherence to privacy regulations, ensuring data security, conducting periodic reviews, and adapting agreements as needed to maintain data privacy standards and legal compliance within NEOM's internal data flows. Mergers and Acquisitions Overseeing the assessment and management of potential privacy risks and compliance issues associated with acquisition of new subsidiaries / mergers and jointed ventures including ensuring that both the acquiring and target companies adhere to applicable data privacy regulations and that data protection practices are aligned throughout the transition. Strong knowledge existing data privacy laws (PDPL, GDPR, etc.) and global/regional frameworks. Expert Knowledge of Data Protection Agreements, Data Transfer Impact Assessments, Standard Contract Clauses and other contractual tools Risk Assessment : Ability to evaluate and mitigate legal risk when sharing personal data with external parties and ability to address risks through contractual provisions Legal Analysis / Advisory : Ability to interpret and analyze laws and regulations and advise of requirements, obligations and implications related to personal data handling, processing, and protection. Drafting : Excellent drafting ability to be able to draft legal terms and conditions Supplier Management : Ability to direct and manage outside counsel Negotiation : Ability to be able to negotiate terms and conditions with 3rd parties Communication : Excellent English skills, Arabic is advantageous, but not required Legal qualifications / training Professional certifications related to data privacy, such as CIPP, or possession of legal credentials and qualifications, including admission to the bar or relevant legal certifications, may be advantageous.