Privacy Associate

Handshake was founded on a simple belief that everyone deserves a path to a great career, regardless of where they went to school or who they know. Today, we power 25 million job seekers, 1 million+ employers, and 1,600 educational institutions.

In 2025, we started Handshake AI and built the fastest-growing AI data business in history. We work directly with frontier AI lab researchers to create evaluations, publish benchmarks, and push the boundary of data. We’ve grown from $0 to ~$1B run rate and pay ~$60M to over 30K individuals every month.

Why join Handshake now:

• Shape how every career evolves in the AI economy, at global scale, with impact your friends, family and peers can see and feel

• Partner hand-in-hand with world-class AI labs, Fortune 500 partners and the world’s top educational institutions

• Work together with engineers, scientists, operators, and more from Palantir, Meta, Scale AI, and former YC founders

• Build a massive, fast-growing business with billions in revenue

Human data is the core infrastructure to AI advancement. Frontier AI labs currently improve model capabilities with various data-intensive post-training techniques. We believe that data spend for AI training will increase by 3-5x in the next few years and continue for much longer as models take on new domains. Handshake AI supports all of the frontier AI labs, working on their most complex data at the largest scale.

Handshake is seeking a Privacy Associate to support the day-to-day execution of our global privacy program. As part of Handshake's Legal team, you will report to the Senior Director & Counsel, Compliance, and work closely with Security, Finance, Product, and Engineering to review new products and vendors, respond to inquiries, maintain program records, and put privacy requirements into practice.

This is a hands-on opportunity to build experience across a broad range of privacy activities, including AI governance, while taking ownership of recurring workflows. We're looking for someone organized and practical, with strong follow-through and the judgment to recognize when an issue needs legal review.

What you'll do

• Vendor and subprocessor management. Assess vendors' data handling practices, review DPAs, coordinate with cross-functional partners on findings, and elevate exceptions. Maintain subprocessor records and disclosures, coordinate required notices, and track diligence requirements.

• Assessments and records. Support the preparation and review of DPIAs, LIAs, and TIAs, gathering information from business owners, documenting findings, and tracking mitigation actions with guidance from the Privacy Program Manager. Keep RoPAs, data inventories, and retention schedules current as products and systems change, and coordinate retention and deletion with business owners.

• Consent and tracking technologies. Own day-to-day administration of Ketch, our privacy rights and consent platform.
  
  Maintain consent experiences, purposes, and jurisdiction-specific rules, including honoring Global Privacy Control and other universal opt-out signals. Run regular consent testing and cookie and tag scans, and work with Marketing and Engineering to categorise tracking technologies, resolve compliance issues, and deploy configuration changes.

• Individual rights
  . Working with Ketch, keep our automated rights request process accurate and reliable. Monitor workflows and deadlines, handle exceptions that automation can’t resolve, spot-check fulfillment across connected systems, and partner with Engineering to resolve integration issues. Track request volume and turnaround times, and recommend workflow improvements.

• Customer audits and inquiries. Prepare responses to customer questionnaires and…