Data Privacy and Practices Attorney / Staff Attorney 1

Working Title: Data Privacy and Practices Attorney

Job Class: Staff Attorney 1

Agency: Direct Care and Treatment

• Job ID : 97767

• Location : Vadnais Heights

• Telework Eligible : Yes

• Full/Part Time : Full-Time

• Regular/Temporary : Unlimited

• Who May Apply : Open to all qualified job seekers

• Date Posted : 10/15/2026

• Closing Date : 10/28/2026

• Hiring Agency/Seniority Unit : Direct Care and Treatment / DCT MAPE State Operated Svcs

• Division/Unit : DCT Support Services / DCT Data Privacy Office

• Work Shift/Work Hours : Day Shift / 8:00am - 4:30pm

• Days of Work : Monday - Friday

• Travel Required : No

• Salary Range: $35.30 - $52.35 / hourly; $73,706 - $109,306 / annually

• Classified Status : Classified

• Bargaining Unit/Union : 214 - MN Assoc of Professional Empl/MAPE

• FLSA Status : Exempt - Professional

• Designated in Connect 700 Program for Applicants with Disabilities (https://mn.gov/mmb/careers/diverse-workforce/people-with-disabilities/connect700/) : Yes

Direct Care & Treatment (DCT) is unable to provide sponsorship for work visas. Applicants must be eligible to work in the United States at the start of employment. DCT does not participate in E-Verify.

The work you'll do is more than just a job.

At the State of Minnesota, employees play a critical role in developing policies, providing essential services, and working to improve the well-being and quality of life for all Minnesotans. The State of Minnesota is committed to equity and inclusion, and invests in employees by providing benefits, support resources, and training and development opportunities.

This position requires an employee to be onsite at 3200 Labore Rd, Ste 104, Vadnais Heights, Minnesota at least 50% of the time, with some opportunity to perform work from a telework location.

• Telework (https://mn.gov/mmb-stat/policies/1422-telework.pdf) is available on a limited basis.

• Only candidates residing in Minnesota or a state bordering Minnesota (Iowa, North Dakota, South Dakota, or Wisconsin) within 50 miles of the work address listed above are eligible for telework.

• Candidates residing in Minnesota and more than 50 miles from the primary/principal work address above may be eligible to telework more than 50%.

Direct Care and Treatment (DCT) operates a diverse system of direct care and treatment programs and services and maintains significant volumes of government data, including protected health information, health records, private and confidential government data, employee information, client information, treatment-related information, and other legally protected data.

This position exists to provide legal research, analysis, and advice concerning assigned suspected or confirmed data security incidents, data privacy, public data requests, requests for access or disclosure and related data governance matters to the DCT Data Privacy Office (DPO). The legal issues presented in the position generally involve the interpretation and application of statutes, administrative rules, court decisions, and other legal authorities to particular, routine and moderately complex facts and circumstances.

As a Data Privacy and Practices Attorney, you will:

• Conduct the legal research necessary to resolve assigned issues, exercise judgment in analyzing assigned matters, and identify legally supportable options within the established area of data privacy and related law.

• Interpret and apply to the Minnesota Government Data Practices Act (MGDPA), Minnesota Health Records Act (MHRA), Health Insurance Portability and Accountability Act (HIPAA) and other applicable state and federal requirements to assigned matters.

• Analyze the interaction of applicable laws and provide legally supportable options and recommendations to the Data Privacy Manager, Deputy General Counsel, and appropriate DCT staff.

Minimum Qualifications

To be qualified for and considered for this position, applicants must meet all the minimum qualifications listed below. To facilitate proper crediting, please ensure that your resume contains descriptions of your work experience sufficient for comparison against the requirements stated below and indicate the beginning and ending month and year for each job held.

• JD degree from an ABA accredited law school; AND

• Current license and in good standing to practice law in Minnesota; AND

• One (1) year experience as a licensed attorney. Experience must demonstrate:

• Experience conducting legal research, writing and analysis; and providing legal advice.

• Knowledge of or ability to develop working knowledge of the Minnesota Government Data Practices Act (MGDPA), HIPAA, Minnesota health records and privacy laws, and other laws governing data privacy, confidentiality, and disclosure.

• Knowledge of principles and practices of professional legal ethics and attorney-client relationships.

Preferred Qualifications

• Experience providing legal advice regarding data privacy, data practices, records management, or information governance, particularly under the Minnesota Government Data Practices Act (MGDPA), HIPAA, or other state and federal privacy laws.

• Experience leading or coordinating complex data privacy or records-related projects involving multiple business areas, legal, technology, and other stakeholders.

• Experience with electronic discovery, document review, records searches, data collection, or e-discovery/document review platforms.

• Experience analyzing complex or emerging data privacy issues and developing practical recommendations to address legal, operational, and technology considerations.

• Experience working with information technology or cybersecurity professionals to address data privacy, data security, electronic records, or data-management issues.

• Experience developing, implementing, or improving policies, procedures, standards, or processes related to data privacy, records, information governance, or electronic discovery.

• Experience working in a government, public-sector, healthcare, or similarly highly regulated environment.

• Our employees are dedicated to ensuring cultural responsiveness. Preferred candidates will have a variety of experiences working effectively with others from different backgrounds and cultures.

Additional Requirements

To facilitate proper crediting, please ensure that your resume clearly describes your experience in the areas listed and indicates the beginning and ending month and year for each job held.

REFERENCE/BACKGROUND CHECKS – Direct Care & Treatment will conduct reference checks to verify job-related credentials and criminal background check prior to appointment.

EDUCATION VERIFICATION - Applicants will be required to provide a copy of their high school diploma at time of interview OR copies of their college transcript or college degree/diploma at time of interview. Copies of the college degree/diploma are acceptable ONLY if it clearly identifies the field in which it was earned.

AN EQUAL OPPORTUNITY EMPLOYER

Minnesota State Colleges and Universities is an Equal Opportunity employer/educator committed to the principles of diversity. We prohibit discrimination against qualified individuals based on their race, sex, color, creed, religion, age, national origin, disability, protected veteran status, marital status, status with regard to public assistance, sexual orientation, gender identity, gender expression, or membership in a local commission as defined by law. As an affirmative action employer, we actively seek and encourage applications from women, minorities, persons with disabilities, and individuals with protected veteran status.

Reasonable accommodations will be made to all qualified applicants with disabilities. If you are an individual with a disability who needs assistance or cannot access the online job application system, please contact the job information line at 651-259-3637 or email [email protected] . Please indicate what assistance is needed.