Breach Response Playbook
Manager · Privacy & GDPR Counsel · Remote · Canada
- Company
- Series B analytics software company · 51–200 employeesCL-12089 · based in Toronto
- Where
- Remote · Canada
- Format
- One-off task
- Time needed
- about 9 h in total
- Start
- Starts within 7 days
- Level
- Manager · 7-12 years
- When you work
- Weekday evenings
191 tasks of this type completed on Deftridge
About this task
This Series B analytics software company (51–200 employees) is looking for a manager Privacy & GDPR Counsel for a single piece of work with a fixed scope and a fixed price. Steps, roles and templates for a data incident.
The company has a deadline, no one free to own it, and wants a person who has done the same job before. The company sells subscription software, so deadlines follow release and billing cycles.
The work is fully remote. Any location in Canada works, with a few hours of overlap with the team's day. Most people do this on weekday evenings; replies inside the working day are not expected.
What you deliver
- Write a breach response playbook with decision tree and regulator notification templates.
- One round of edits after the company's review is included
- A 20-minute walkthrough call, or a recorded screen share if you prefer
- The finished deliverable in the agreed file format, with sources and assumptions listed
How the work runs
- Day 1: kickoff call and access to the files
- Days 2 to 6: the work, with questions answered the same day
- Last day: delivery and a short walkthrough
Duration: 1 to 2 weeks. Accepted after the walkthrough. Edits requested within three working days are part of the price.
Tools
Who fits
- 7-12 years of hands-on work as a Privacy & GDPR Counsel, or the equivalent mix of roles
- Comfortable working in Google Docs and Notion
- Admission to practise in Canada is required, and the sign-off on legal advice stays with the company's own counsel.
- Your own work history stays private; the company sees a first name, your field and a rate
Nice to have
- Experience in a similar industry
- Used to short written handovers
Not included
- Travel or work at a fixed location
- Work outside the scope written in the brief; extra items are quoted separately
- A signature or opinion in your own name: sign-off stays with the company
How you get paid
- The company prepays Deftridge before your first hour, so payment does not depend on a late invoice.
- Deftridge pays you in CAD after the company confirms the hours or the deliverable. The payment date is written in your task agreement.
- You work as an independent contractor: you report your own income, and your recruiter sends the statements your accountant needs.
- You never chase the company. Questions about money go to Deftridge.
What happens after you say you're interested
- Within one working dayA recruiter writes to you to confirm your hours and the rate you want.
- You agree the rateYou and the recruiter fix an exact rate inside the company's range. You decide whether to go ahead.
- With your written OKThe company sees the anonymous profile below. Most companies answer within three working days.
- StartYou sign the task agreement and the company's confidentiality terms through Deftridge, and begin on the date above.
What the company sees about you
First name, field, experience, tools and the hours you offer. Not your surname, your employer or your contact details.
- Experience
- 7-12 years in legal
- Tools
- Google Docs, Notion
- Offers
- 9 hours in total, weekday evenings
- Rate
- CA$116 an hour, agreed with the recruiter
How this rate compares
The midpoint of this range, CA$116 an hour, is above the median manager Privacy & GDPR Counsel rate in Canada (CA$115). The shaded band is the 25th to 75th percentile of the market.
All Privacy & GDPR Counsel jobs in Canada · Privacy & GDPR Counsel rates in Canada · Legal jobs
Questions about pay and privacy
The rules are the same for every task. Pricing explains the 15% fee, prepayment and when you are paid; How it works covers matching, what the company sees and side work next to a job.
CL-12089 is the Deftridge code for this company. Its name is shared only after you agree to an introduction, and you decide whether to go ahead.