LNDS - 094 ELSI specialist – secondary use of sensitive data (fixed term 24 months)

Luxembourg National Data Service

WHO WE ARE Luxembourg National Data Service (LNDS) is a brand of PNED G.I.E. an organisation created by the Luxembourg Government, to implement Luxembourg’s strategies in research, innovation, and digitalisation. LNDS enables value creation from secondary use of data, for public and private partners and supports the sharing and re-use of public sector data, in a trustable manner. The LNDS service portfolio includes know-how, capabilities, tools, infrastructure, and data services. Through efficient & responsible use of data and improving the secondary use of data, LNDS will support the acceleration of economic, ecological, and societal transitions. www.lnds.lu | LNDS on LinkedIn PURPOSE OF THE JOB / PROJECT LNDS is a key partner in the project “Luxembourg AI Factory” co-financed by the European Union under the EuroHPC joint undertaking. In this project, LNDS is leading the development of services related to data access and reuse facilitation, as well as supporting regulatory compliance readiness of AI innovation within Luxembourg. As a Legal and Privacy Specialist, you will be part of the Ethical, Legal and Social Implications (ELSI) team and your role will focus on the development and delivery of services in the AI Factory project related to regulatory guidance of the EU AI Act, training and support. You will also advise on the data protection requirements, compliance with other related legislations and other challenges that need to be addressed as part of the operations and services of our organisation.  WHAT YOU WILL DO * Analysis and interpretation of legal and/or ethical requirements based on legal and ethical norms, review of existing guidelines and, where applicable, case law. The main thematic focus of this work will be on the legal, regulatory, and ethical challenges relating to the secondary use of data and machine learning applications, in particular Artificial Intelligence (AI) systems. * Drafting and reviewing written reports and other project deliverables. * Conducting privacy and data protection assessments to evaluate the project’s compliance and identify potential areas for improvement. * Offering expert advice on data governance, data mapping, responsible AI, privacy by design, technical and security measures. * Collaborating with cross-functional teams to integrate privacy considerations into business processes, products and services offered by LNDS within the scope of the AI Factory. * Development of practical tools, templates, guidance, training and other instruments for ELSI compliance. * Analysis of the legal landscape on national and EU Level where relevant for LNDS’ service in the AI Factory, in particular for secondary use of data, data security, AI Act compliance and other legal standards. WHO YOU ARE * Overall experience of 5 to 10 years with relevant experience in privacy, technology, data & IP law with a consulting company, law firm, technology company or research entity. * Master’s degree in law, specialisation in European laws (EU AI Act, GDPR), technology, digitalisation and IP law is considered a strong plus.   * Good knowledge of and experience in conducting AI and data protection impact/risk assessments and advising on key regulatory frameworks such as the GDPR and EU AI Act. * Proven work experience with challenges related to data protection by design and default in the development of products and services. * Ability to translate legal advice into practical recommendations for new products and services and in collaboration with an information security team. * Excellent communication and interpersonal skills (ability to listen, understand and convey your ideas) and the ability to articulate clearly legal obligations to various audiences (scientists, clients, internal colleagues, …) both in written and oral forms.  * Experience in writing academic or policy papers focused on the ethical/legal aspects of AI is a strong plus. * Ability to work independently and collaboratively in a fast-paced environment. * Creative, solution-oriented with strong analytical skills and a mindset for quality. * Critical thinking, adaptable, flexible and able to accept and manage changes in the workplace. * Cultural intelligence and diversity consciousness. * Conscientious about time management (becoming more effective and efficient in how you work). * Familiarity with Agile methodologies and project management software such as collaboration tools commonly used in tech environments (e.g., Confluence, Jira, Slack, …). * Proficient in English. * Proficient in French.

Luxembourg National Data Service

WHO WE ARE Luxembourg National Data Service (LNDS) is a brand of PNED G.I.E. an organisation created by the Luxembourg Government, to implement Luxembourg’s strategies in research, innovation, and digitalisation. LNDS enables value creation from secondary use of data, for public and private partners and supports the sharing and re-use of public sector data, in a trustable manner. The LNDS service portfolio includes know-how, capabilities, tools, infrastructure, and data services. Through efficient & responsible use of data and improving the secondary use of data, LNDS will support the acceleration of economic, ecological, and societal transitions. www.lnds.lu | LNDS on LinkedIn PURPOSE OF THE JOB / PROJECT LNDS participates in several European projects where we support the secondary use of health/biomedical data in the context of scientific research, Artificial Intelligence (AI) development, and other innovative activities. Our aim is to support our partners who pursue secondary use of data in health/biomedical projects in a manner that is lawful, compliant, and ethically sound. As part of these efforts, we routinely work with external stakeholders such as clinical researchers, epidemiologists, data scientists, (health) data infrastructure providers, as well as policy-makers, regulators, legislators and other legal experts. Our aim is to advise and guide these stakeholders in the implementation of data governance frameworks and data infrastructures for secondary use of protected or sensitive data, with a particular focus on health/biomedical data. You will be part of an interdisciplinary team working on the ethical, legal, and social implications (ELSI) of secondary use of health/biomedical data. You will support, as an ELSI Specialist, the participation of LNDS in the European projects that leverage health and biomedical data, working closely with the LNDS team as well as with European stakeholders and project participants in the various working groups. WHAT YOU WILL DO * Analysis and interpretation of legal and/or ethical requirements in secondary use of health-related data, based on the legislation, prevailing legal and ethical norms, existing guidelines and, where applicable, case law. * Investigating the impact and compliance implications of the AI Act on the development of AI systems for healthcare and public health applications * When assisting external partners with their ethico-legal compliance efforts, you will provide analyses of planned operations and workflows as well as provide support related to data protection impact assessments (DPIAs) and other privacy/impact assessments. * Development of policies, guidelines, and technical requirements frameworks to enable solutions for ethico-legal compliance when pursuing secondary use of health datasets. * Development of, or contribution to practical tools, templates, guidance, training and other instruments for ELSI compliance. * Engagement in European working groups and consortia, including preparation of content for periodic meetings, contribution to drafting or reviewing formal documents or deliverables, writing of meeting minutes, and interaction with the working group members. WHO YOU ARE * A master’s or PhD degree with several years of work experience at the intersection of: 1. Data protection, data governance, legal and institutional compliance in secondary use of data; and 2. healthcare, biological sciences, bioinformatics, genomics, or a related biomedical field  * Candidates with the following background are particularly encouraged to apply: 1. Legal professionals, compliance specialists or legal scholars with extensive exposure to the healthcare and/or biomedical research domains 2. Biomedical researchers, bioinformaticians, or (health) data scientists with considerable experience in assisting with legal or institutional compliance matters 3. Data stewards, data managers, and data governance specialists active in the domain of healthcare and/or biomedical research 4. Bioethicists and institutional ethics board members knowledgeable about the applicable regulations * Number of years of relevant experience: 5 to 10 years (years spent to acquire a PhD degree count as work experience). * Familiarity with the key European legal and regulatory frameworks, namely: the GDPR, the AI Act, and the EHDS Regulation. At a minimum, demonstrable expertise in at least one of these legal frameworks is required, coupled with a good understanding of the remaining two. * Familiarity with any other national/European legal frameworks or institutional ethics procedures around secondary use of health and biomedical data is a strong plus. * Experience with data protection by design and default workflows, data protection/privacy risk assessments, and other related assessments * Proficient in English. * You are enthusiastic about the legal aspects of data research or the conceptual and/or technical implementation of data protection principles for workflows. * Good communication skills (ability to listen, understand and convey your ideas) and the ability to articulate clearly the ELSI needs to a diverse audience (biomedical scientists, legal experts, policy professionals, etc)  * Excellent writing skills. Experience in writing academic or policy papers focused on the ELSI of health/biomedical data is a strong plus. * Creative, solution-oriented mindset with strong analytical skills. * You have critical thinking skills; you are adaptable and flexible. * You have cultural intelligence and diversity consciousness.

Luxembourg National Data Service

WHO WE ARE Luxembourg National Data Service (LNDS) is a brand of PNED G.I.E. an organisation created by the Luxembourg Government, to implement Luxembourg’s strategies in research, innovation, and digitalisation. LNDS enables value creation from secondary use of data, for public and private partners and supports the sharing and re-use of public sector data, in a trustable manner. The LNDS service portfolio includes know-how, capabilities, tools, infrastructure, and data services. Through efficient & responsible use of data and improving the secondary use of data, LNDS will support the acceleration of economic, ecological, and societal transitions. www.lnds.lu | LNDS on LinkedIn PURPOSE OF THE JOB / PROJECT Ready to play a key role in shaping and improving innovative data solutions within a dynamic Agile environment? Join our team and contribute to impactful European-funded initiatives that drive innovation across key data domains. You will have the opportunity to work on strategic projects suchas SCAILED, which promotes the responsible adoption of AI in the biotech sector, EuropeAI, focused on developing sovereign and trustworthy Generative AI solutions for public administrations and PANDAI: AI-driven pandemic monitoring and response observatory. As a Data Steward, you will contribute to the design and development of new services and project-related tools, helping deliver high-quality solutions and strengthen LNDS's service capabilities within these subsidy-funded initiatives.  As a Data Steward, you will play a central role in the delivery, enhancement and scaling of LNDS’s Data Management (DM) and Data Stewardship (DS) services, which support responsible, systematic, and impactful data re-use across Luxembourg’s research and public sectors. Working closely with data providers, users, domain experts and LNDS partners, you will identify data stewardship needs,  translate requirements into service improvements, and contribute to the continuous evolution of LNDS’s service portfolio. You will help organisations establish effective data lifecycle management and preservation practices, facilitate access to sensitive data under relevant data-sharing frameworks, and promote the adoption of national and international standards and best practices. In collaboration with internal teams—including technology, information security, data science, data engineering, legal, and ELSI experts, and the Data Protection Officer—you will ensure compliant, efficient and high-quality service delivery. You will also contribute to knowledge development, training, community-building, and outreach activities, while gathering and translating requirements arising from LNDS mandates and project engagements into new service features and improvements. Through this role, you will help drive service quality, value creation, cross-functional collaboration and the scalable delivery of data stewardship capabilities across the Luxembourg data ecosystem. WHAT YOU WILL DO * Deliver LNDS DM/DS services including any other service that will emerge and evolve in the future. Offer service delivery via various methods including community engagement, helpdesk, and consultancy. * Maintain the DM/DS knowledge base and toolbox used during service development and delivery. * Assist prospective data users in placing access requests for protected data. Advise applicants on fulfilling access application forms and required documents. * Collaborate with the LNDS ELSI team to perform Data Protection Impact Assessments (DPIA) for data processing activities concerning sensitive data. * Contribute to efforts on inventorisation of research and public sector datasets by curating metadata on data custodians, provenance, and use restrictions. * Prepare and maintain project documentation, including Data Management Plans (DMPs) and other deliverables, such as FAIR implementation and data governance framework, required for European-funded projects. * Participate in European initiatives and projects related to data governance and Artificial Intelligence. * Contribute to and continuously improve community engagement activities, and establish a community events calendar  * Provide training on DM/DS best practices, tools, and related LNDS services. * Support the development of internal processes and guidelines to support relevant information security and data protection compliance and certifications. * Engage in (inter-)national projects related to DM/DS service development. WHO YOU ARE * MSc or PhD in natural science or technology, or social science with technical skills. * 2 to 5 years of experience, including relevant ones in the following areas: 1. Data stewardship 2. Data management 3. Community coordination, outreach and training. * Experience in one or several of the following topics: 1. Area-specific data management, such as research data management (RDM), data collaboratories, or data governance in the enterprise. 2. Ethically and legally compliant stewardship of sensitive data. 3. Community building and management. * Working knowledge in data lifecycle management and FAIR data principles (Findability, Accessibility, Interoperability, and Reuse) for data stewardship. * Good experience in writing (white papers, documentation, reports, policies) and creating content for the readership of national stakeholders and the public (online guides, tutorials). * Working knowledge of the GDPR and its relevance to data management and stewardship. * Working knowledge of one programming language (Python or R). * Working knowledge of basic website authoring (markdown, jinja, HTML). * Working knowledge of the Agile Methodology. * Excellent verbal communication skills in English. Knowledge of French will be a significant advantage. * Service and collaborative attitude. * Ability and willingness to interact closely with stakeholders. * Ability to handle multiple assignments while working independently and effectively under deadlines.