Data Subject Request Handling

About this task

This biotech company in rare diseases (51–200 employees) is looking for a director Privacy & GDPR Counsel for an ongoing part-time engagement of 1–2 h a week. Handles access and deletion requests within the legal deadline.

The team is stretched and wants steady, predictable help instead of another full-time hire. It works in life sciences, where documents are versioned and reviewed in a fixed order.

The team sits in Buffalo. Everything can be done remotely; an occasional visit is welcome and never required for the first month. Most people do this on weekday evenings; replies inside the working day are not expected. About 2 hours a week should overlap with the team's day (ET).

What you deliver

• Handle the month's data subject requests and prepare the response letters and records.
• A written update every Friday with what was done, what is next and anything blocked
• A short handover note when the engagement pauses or ends
• Work logged against the agreed list, so the company contact can see progress without a call

What a week looks like

• Monday: pick up the queue and confirm priorities
• Midweek: two short working sessions of one to two hours
• Friday: update sent before the company's end of day

Duration: 12 weeks, renewable. Accepted after the walkthrough. Edits requested within three working days are part of the price.

Tools

How you get paid

• The company prepays Deftridge before your first hour, so payment does not depend on a late invoice.
• Deftridge pays you in USD after the company confirms the hours or the deliverable. The payment date is written in your task agreement.
• You work as an independent contractor: you report your own income, and your recruiter sends the statements your accountant needs.
• You never chase the company. Questions about money go to Deftridge.

What happens after you say you're interested

1. Within one working dayA recruiter writes to you to confirm your hours and the rate you want.
2. You agree the rateYou and the recruiter fix an exact rate inside the company's range. You decide whether to go ahead.
3. With your written OKThe company sees the anonymous profile below. Most companies answer within three working days.
4. StartYou sign the task agreement and the company's confidentiality terms through Deftridge, and begin on the date above.

What the company sees about you

First name, field, experience, tools and the hours you offer. Not your surname, your employer or your contact details.

How this rate compares

The midpoint of this range, $132 an hour, is below the median director Privacy & GDPR Counsel rate in New York ($200). The shaded band is the 25th to 75th percentile of the market.

All Privacy & GDPR Counsel jobs in United States · Privacy & GDPR Counsel rates in New York · Legal jobs

Questions about pay and privacy

The rules are the same for every task. Pricing explains the 15% fee, prepayment and when you are paid; How it works covers matching, what the company sees and side work next to a job.