Consumer Protection Attorney Jobs in Michigan (NOW HIRING)

Varnum is seeking an Associate Attorney with three to five years of legal experience to support its Privacy and Mobility Practice Team in one of the firm’s Grand Rapids, Michigan; Novi, Michigan; or Naples, Florida offices.

Varnum’s Privacy and Mobility team is a leading national practice that works on the cutting edge of emerging technology and law. The team advises organizations on the development of AI, data privacy and security practices and provides real-time counsel in response to an evolving regulatory environment. The team works with clients across industries, including autonomous and connected vehicles and the consumer data marketplace, and provides practical, client-focused representation in matters shaped by changing privacy, AI, cybersecurity, technology, and mobility requirements. This is a unique opportunity to join a thriving law firm and a highly successful team of attorneys.

The associate will work with partners, senior attorneys, and clients on a range of counseling, contracting, compliance, and regulatory matters. Responsibilities will include:

• Advising clients on the development, implementation, and maintenance of privacy and cybersecurity compliance programs, including programs designed to address state, federal, and global privacy requirements.
• Drafting, reviewing, and negotiating privacy- and data-related agreements, including data sharing agreements, licensing agreements, vendor agreements, technology agreements, and other commercial contracts involving personal, de-identified, connected vehicle, consumer, or business data.
• Conducting legal research and analysis on privacy, cybersecurity, technology, mobility, and related regulatory issues, and preparing client-ready memoranda, presentations, and practical recommendations.
• Drafting privacy policies, consumer-facing disclosures, internal policies, cybersecurity guidance, data governance documentation, and related client-facing work product.
• Supporting mobility-related matters involving privacy, autonomous vehicle regulatory and safety compliance, Federal Motor Vehicle Safety Standards, NHTSA compliance, product liability, vehicle connectivity, and connected products.
• Assisting with privacy and cybersecurity incident response, regulatory inquiries, and related client communications.
• Monitoring legal and regulatory developments affecting privacy, cybersecurity, data governance, connected technologies, and mobility, and translating those developments into client updates, policies, and compliance strategies.

Candidates should be prepared to grow into a role that combines privacy counseling, technology contracting, mobility-sector regulatory work, and general law firm associate responsibilities. Candidates should have:

• Juris Doctor degree from an accredited law school.
• Admission to practice law in at least one U.S. jurisdiction and in good standing.
• Three to five years of relevant legal experience.
• Prior experience in privacy, data protection, cybersecurity, technology transactions, data governance, or a closely related area.
• Experience with state consumer privacy laws, GDPR, GLBA, HIPAA, BIPA, cybersecurity governance, privacy policies, data processing terms, data sharing agreements, or technology contracting.
• Demonstrated ability to produce clear, client-ready written work product, including legal analysis, contract language, policies, and practical recommendations.
• Sound analytical judgment, attention to detail, and the ability to work through ambiguous legal and business issues to identify practical, risk-based solutions.
• Interest in working with clients in technology-forward industries, including autonomous and connected vehicles, mobility services, consumer data, connected products, and other businesses navigating privacy, cybersecurity, and regulatory issues.
• Ability to manage multiple matters, deadlines, and priorities while maintaining accuracy, confidentiality, and professionalism.
• Preferred: IAPP CIPP/US certification.

In addition, successful candidates will demonstrate the following through their experience and work product:

• Ownership of matters and follow-through on deadlines, details, and client commitments.
• A collaborative, professional approach to working with partners, associates, staff, and clients.
• Curiosity about emerging technologies and the business context in which clients collect, use, share, and protect data.
• Ability to turn complex, unsettled, or incomplete information into clear options and practical recommendations.