LNDS - 095 - Data Steward II – Subsidy Projects (fixed term 24 months)

Luxembourg National Data Service

WHO WE ARE Luxembourg National Data Service (LNDS) is a brand of PNED G.I.E. an organisation created by the Luxembourg Government, to implement Luxembourg’s strategies in research, innovation, and digitalisation. LNDS enables value creation from secondary use of data, for public and private partners and supports the sharing and re-use of public sector data, in a trustable manner. The LNDS service portfolio includes know-how, capabilities, tools, infrastructure, and data services. Through efficient & responsible use of data and improving the secondary use of data, LNDS will support the acceleration of economic, ecological, and societal transitions. www.lnds.lu | LNDS on LinkedIn PURPOSE OF THE JOB / PROJECT LNDS is a key partner in the project “Luxembourg AI Factory” co-financed by the European Union under the EuroHPC joint undertaking. In this project, LNDS is leading the development of services related to data access and reuse facilitation, as well as supporting regulatory compliance readiness of AI innovation within Luxembourg. As a Legal and Privacy Specialist, you will be part of the Ethical, Legal and Social Implications (ELSI) team and your role will focus on the development and delivery of services in the AI Factory project related to regulatory guidance of the EU AI Act, training and support. You will also advise on the data protection requirements, compliance with other related legislations and other challenges that need to be addressed as part of the operations and services of our organisation.  WHAT YOU WILL DO * Analysis and interpretation of legal and/or ethical requirements based on legal and ethical norms, review of existing guidelines and, where applicable, case law. The main thematic focus of this work will be on the legal, regulatory, and ethical challenges relating to the secondary use of data and machine learning applications, in particular Artificial Intelligence (AI) systems. * Drafting and reviewing written reports and other project deliverables. * Conducting privacy and data protection assessments to evaluate the project’s compliance and identify potential areas for improvement. * Offering expert advice on data governance, data mapping, responsible AI, privacy by design, technical and security measures. * Collaborating with cross-functional teams to integrate privacy considerations into business processes, products and services offered by LNDS within the scope of the AI Factory. * Development of practical tools, templates, guidance, training and other instruments for ELSI compliance. * Analysis of the legal landscape on national and EU Level where relevant for LNDS’ service in the AI Factory, in particular for secondary use of data, data security, AI Act compliance and other legal standards. WHO YOU ARE * Overall experience of 5 to 10 years with relevant experience in privacy, technology, data & IP law with a consulting company, law firm, technology company or research entity. * Master’s degree in law, specialisation in European laws (EU AI Act, GDPR), technology, digitalisation and IP law is considered a strong plus.   * Good knowledge of and experience in conducting AI and data protection impact/risk assessments and advising on key regulatory frameworks such as the GDPR and EU AI Act. * Proven work experience with challenges related to data protection by design and default in the development of products and services. * Ability to translate legal advice into practical recommendations for new products and services and in collaboration with an information security team. * Excellent communication and interpersonal skills (ability to listen, understand and convey your ideas) and the ability to articulate clearly legal obligations to various audiences (scientists, clients, internal colleagues, …) both in written and oral forms.  * Experience in writing academic or policy papers focused on the ethical/legal aspects of AI is a strong plus. * Ability to work independently and collaboratively in a fast-paced environment. * Creative, solution-oriented with strong analytical skills and a mindset for quality. * Critical thinking, adaptable, flexible and able to accept and manage changes in the workplace. * Cultural intelligence and diversity consciousness. * Conscientious about time management (becoming more effective and efficient in how you work). * Familiarity with Agile methodologies and project management software such as collaboration tools commonly used in tech environments (e.g., Confluence, Jira, Slack, …). * Proficient in English. * Proficient in French.

Luxembourg National Data Service

WHO WE ARE Luxembourg National Data Service (LNDS) is a brand of PNED G.I.E. an organisation created by the Luxembourg Government, to implement Luxembourg’s strategies in research, innovation, and digitalisation. LNDS enables value creation from secondary use of data, for public and private partners and supports the sharing and re-use of public sector data, in a trustable manner. The LNDS service portfolio includes know-how, capabilities, tools, infrastructure, and data services. Through efficient & responsible use of data and improving the secondary use of data, LNDS will support the acceleration of economic, ecological, and societal transitions. www.lnds.lu | LNDS on LinkedIn PURPOSE OF THE JOB / PROJECT LNDS participates in several European projects where we support the secondary use of health/biomedical data in the context of scientific research, Artificial Intelligence (AI) development, and other innovative activities. Our aim is to support our partners who pursue secondary use of data in health/biomedical projects in a manner that is lawful, compliant, and ethically sound. As part of these efforts, we routinely work with external stakeholders such as clinical researchers, epidemiologists, data scientists, (health) data infrastructure providers, as well as policy-makers, regulators, legislators and other legal experts. Our aim is to advise and guide these stakeholders in the implementation of data governance frameworks and data infrastructures for secondary use of protected or sensitive data, with a particular focus on health/biomedical data. You will be part of an interdisciplinary team working on the ethical, legal, and social implications (ELSI) of secondary use of health/biomedical data. You will support, as an ELSI Specialist, the participation of LNDS in the European projects that leverage health and biomedical data, working closely with the LNDS team as well as with European stakeholders and project participants in the various working groups. WHAT YOU WILL DO * Analysis and interpretation of legal and/or ethical requirements in secondary use of health-related data, based on the legislation, prevailing legal and ethical norms, existing guidelines and, where applicable, case law. * Investigating the impact and compliance implications of the AI Act on the development of AI systems for healthcare and public health applications * When assisting external partners with their ethico-legal compliance efforts, you will provide analyses of planned operations and workflows as well as provide support related to data protection impact assessments (DPIAs) and other privacy/impact assessments. * Development of policies, guidelines, and technical requirements frameworks to enable solutions for ethico-legal compliance when pursuing secondary use of health datasets. * Development of, or contribution to practical tools, templates, guidance, training and other instruments for ELSI compliance. * Engagement in European working groups and consortia, including preparation of content for periodic meetings, contribution to drafting or reviewing formal documents or deliverables, writing of meeting minutes, and interaction with the working group members. WHO YOU ARE * A master’s or PhD degree with several years of work experience at the intersection of: 1. Data protection, data governance, legal and institutional compliance in secondary use of data; and 2. healthcare, biological sciences, bioinformatics, genomics, or a related biomedical field  * Candidates with the following background are particularly encouraged to apply: 1. Legal professionals, compliance specialists or legal scholars with extensive exposure to the healthcare and/or biomedical research domains 2. Biomedical researchers, bioinformaticians, or (health) data scientists with considerable experience in assisting with legal or institutional compliance matters 3. Data stewards, data managers, and data governance specialists active in the domain of healthcare and/or biomedical research 4. Bioethicists and institutional ethics board members knowledgeable about the applicable regulations * Number of years of relevant experience: 5 to 10 years (years spent to acquire a PhD degree count as work experience). * Familiarity with the key European legal and regulatory frameworks, namely: the GDPR, the AI Act, and the EHDS Regulation. At a minimum, demonstrable expertise in at least one of these legal frameworks is required, coupled with a good understanding of the remaining two. * Familiarity with any other national/European legal frameworks or institutional ethics procedures around secondary use of health and biomedical data is a strong plus. * Experience with data protection by design and default workflows, data protection/privacy risk assessments, and other related assessments * Proficient in English. * You are enthusiastic about the legal aspects of data research or the conceptual and/or technical implementation of data protection principles for workflows. * Good communication skills (ability to listen, understand and convey your ideas) and the ability to articulate clearly the ELSI needs to a diverse audience (biomedical scientists, legal experts, policy professionals, etc)  * Excellent writing skills. Experience in writing academic or policy papers focused on the ELSI of health/biomedical data is a strong plus. * Creative, solution-oriented mindset with strong analytical skills. * You have critical thinking skills; you are adaptable and flexible. * You have cultural intelligence and diversity consciousness.

Luxembourg National Data Service

WHO WE ARE Luxembourg National Data Service (LNDS) is a brand of PNED G.I.E. an organisation created by the Luxembourg Government, to implement Luxembourg’s strategies in research, innovation, and digitalisation. LNDS enables value creation from secondary use of data, for public and private partners and supports the sharing and re-use of public sector data, in a trustable manner. The LNDS service portfolio includes know-how, capabilities, tools, infrastructure, and data services. Through efficient & responsible use of data and improving the secondary use of data, LNDS will support the acceleration of economic, ecological, and societal transitions. www.lnds.lu | LNDS on LinkedIn PURPOSE OF THE JOB / PROJECT LNDS supports organisations in their pursuit of lawful, compliant, and ethically sound secondary use of sensitive data. We work with public sector bodies, research institutes, and other partner organisations in Luxembourg and across Europe, facilitating secondary use of sensitive/protected data in the context of research, Artificial Intelligence (AI) development, and various innovative activities. As part of these efforts, we collaborate with external stakeholders such as data scientists, data infrastructure providers, privacy professionals, policy-makers, regulators, legislators and other legal experts. Our aim is to advise and guide these stakeholders in the implementation of data governance frameworks and data infrastructures for secondary use of protected or sensitive data.   You will be part of an interdisciplinary team working on the ethical, legal, and social implications (ELSI) of secondary use of sensitive/protected data. You will support, as an ELSI Specialist, the participation of LNDS in various national and European projects that leverage sensitive/protected data, working closely with the LNDS team as well as with external project participants in various working groups. WHAT YOU WILL DO * Analysis and interpretation of legal and/or data governance requirements in secondary use of sensitive data, based on the legislation, prevailing legal and ethical norms, existing guidelines and, where applicable, case law.  * Development of policies, guidelines, and technical requirement frameworks to enable solutions for ethico-legal compliance when pursuing secondary use of sensitive/protected datasets.  * When assisting external partners with their ethico-legal compliance efforts, you will provide analyses of planned operations and workflows as well as provide support related to data protection impact assessments (DPIAs) and other privacy/impact assessments.  * Development of, or contribution to practical tools, templates, guidance, training and other instruments for ELSI compliance. * Engagement in European working groups and consortia, including preparation of content for periodic meetings, contribution to drafting or reviewing formal documents or deliverables, writing of meeting minutes, and interaction with the working group members WHO YOU ARE * A master’s or PhD degree with several years of work experience in data protection, privacy, data governance, and/or data stewardship  * Candidates with the following background are particularly encouraged to apply:  * Legal professionals, compliance specialists or legal scholars with background in data protection or data governance * Data scientists (e.g., statisticians, bioinformaticians) with considerable experience in assisting with legal or institutional compliance matters related to data-driven research projects * Data stewards, data managers, and data governance specialists experienced in the management of sensitive/protected data  * Number of years of relevant experience: 5 to 10 years (years spent to acquire a PhD degree count as work experience).  * Familiarity with the key European legal and regulatory frameworks, namely: the GDPR, the AI Act, and the Data Governance Act. Familiarity with any other national/European legal frameworks or institutional ethics procedures around secondary use of sensitive data is a strong plus.  * Familiarity with the tools and frameworks used in data governance contexts. (e.g., Data Management Plans, implementation of FAIR principles, procedures for requesting and granting data access in secure processing environments)  * Experience with data protection by design and default workflows, data protection/privacy risk assessments, and other related assessments * Proficient in English  * Proficient in French  * You are enthusiastic about the legal aspects of data research or the conceptual and/or technical implementation of data protection principles for workflows.  * Good communication skills (ability to listen, understand and convey your ideas) and the ability to articulate clearly the ELSI needs to a diverse audience (scientists, legal experts, policy professionals, etc)  * Creative, solution-oriented mindset with strong analytical skills.  * You have critical thinking skills; you are adaptable and flexible.  * You have cultural intelligence and diversity consciousness.