LNDS - 091 Legal and Privacy Specialist – AI Factory project (fixed term - 24 months)

Luxembourg National Data Service

WHO WE ARE Luxembourg National Data Service (LNDS) is a brand of PNED G.I.E. an organisation created by the Luxembourg Government, to implement Luxembourg’s strategies in research, innovation, and digitalisation. LNDS enables value creation from secondary use of data, for public and private partners and supports the sharing and re-use of public sector data, in a trustable manner. The LNDS service portfolio includes know-how, capabilities, tools, infrastructure, and data services. Through efficient & responsible use of data and improving the secondary use of data, LNDS will support the acceleration of economic, ecological, and societal transitions. www.lnds.lu | LNDS on LinkedIn PURPOSE OF THE JOB / PROJECT LNDS participates in several European projects where we support the secondary use of health/biomedical data in the context of scientific research, Artificial Intelligence (AI) development, and other innovative activities. Our aim is to support our partners who pursue secondary use of data in health/biomedical projects in a manner that is lawful, compliant, and ethically sound. As part of these efforts, we routinely work with external stakeholders such as clinical researchers, epidemiologists, data scientists, (health) data infrastructure providers, as well as policy-makers, regulators, legislators and other legal experts. Our aim is to advise and guide these stakeholders in the implementation of data governance frameworks and data infrastructures for secondary use of protected or sensitive data, with a particular focus on health/biomedical data. You will be part of an interdisciplinary team working on the ethical, legal, and social implications (ELSI) of secondary use of health/biomedical data. You will support, as an ELSI Specialist, the participation of LNDS in the European projects that leverage health and biomedical data, working closely with the LNDS team as well as with European stakeholders and project participants in the various working groups. WHAT YOU WILL DO * Analysis and interpretation of legal and/or ethical requirements in secondary use of health-related data, based on the legislation, prevailing legal and ethical norms, existing guidelines and, where applicable, case law. * Investigating the impact and compliance implications of the AI Act on the development of AI systems for healthcare and public health applications * When assisting external partners with their ethico-legal compliance efforts, you will provide analyses of planned operations and workflows as well as provide support related to data protection impact assessments (DPIAs) and other privacy/impact assessments. * Development of policies, guidelines, and technical requirements frameworks to enable solutions for ethico-legal compliance when pursuing secondary use of health datasets. * Development of, or contribution to practical tools, templates, guidance, training and other instruments for ELSI compliance. * Engagement in European working groups and consortia, including preparation of content for periodic meetings, contribution to drafting or reviewing formal documents or deliverables, writing of meeting minutes, and interaction with the working group members. WHO YOU ARE * A master’s or PhD degree with several years of work experience at the intersection of: 1. Data protection, data governance, legal and institutional compliance in secondary use of data; and 2. healthcare, biological sciences, bioinformatics, genomics, or a related biomedical field  * Candidates with the following background are particularly encouraged to apply: 1. Legal professionals, compliance specialists or legal scholars with extensive exposure to the healthcare and/or biomedical research domains 2. Biomedical researchers, bioinformaticians, or (health) data scientists with considerable experience in assisting with legal or institutional compliance matters 3. Data stewards, data managers, and data governance specialists active in the domain of healthcare and/or biomedical research 4. Bioethicists and institutional ethics board members knowledgeable about the applicable regulations * Number of years of relevant experience: 5 to 10 years (years spent to acquire a PhD degree count as work experience). * Familiarity with the key European legal and regulatory frameworks, namely: the GDPR, the AI Act, and the EHDS Regulation. At a minimum, demonstrable expertise in at least one of these legal frameworks is required, coupled with a good understanding of the remaining two. * Familiarity with any other national/European legal frameworks or institutional ethics procedures around secondary use of health and biomedical data is a strong plus. * Experience with data protection by design and default workflows, data protection/privacy risk assessments, and other related assessments * Proficient in English. * You are enthusiastic about the legal aspects of data research or the conceptual and/or technical implementation of data protection principles for workflows. * Good communication skills (ability to listen, understand and convey your ideas) and the ability to articulate clearly the ELSI needs to a diverse audience (biomedical scientists, legal experts, policy professionals, etc)  * Excellent writing skills. Experience in writing academic or policy papers focused on the ELSI of health/biomedical data is a strong plus. * Creative, solution-oriented mindset with strong analytical skills. * You have critical thinking skills; you are adaptable and flexible. * You have cultural intelligence and diversity consciousness.

Luxembourg National Data Service

WHO WE ARE Luxembourg National Data Service (LNDS) is a brand of PNED G.I.E. an organisation created by the Luxembourg Government, to implement Luxembourg’s strategies in research, innovation, and digitalisation. LNDS enables value creation from secondary use of data, for public and private partners and supports the sharing and re-use of public sector data, in a trustable manner. The LNDS service portfolio includes know-how, capabilities, tools, infrastructure, and data services. Through efficient & responsible use of data and improving the secondary use of data, LNDS will support the acceleration of economic, ecological, and societal transitions. www.lnds.lu | LNDS on LinkedIn PURPOSE OF THE JOB / PROJECT LNDS supports organisations in their pursuit of lawful, compliant, and ethically sound secondary use of sensitive data. We work with public sector bodies, research institutes, and other partner organisations in Luxembourg and across Europe, facilitating secondary use of sensitive/protected data in the context of research, Artificial Intelligence (AI) development, and various innovative activities. As part of these efforts, we collaborate with external stakeholders such as data scientists, data infrastructure providers, privacy professionals, policy-makers, regulators, legislators and other legal experts. Our aim is to advise and guide these stakeholders in the implementation of data governance frameworks and data infrastructures for secondary use of protected or sensitive data.   You will be part of an interdisciplinary team working on the ethical, legal, and social implications (ELSI) of secondary use of sensitive/protected data. You will support, as an ELSI Specialist, the participation of LNDS in various national and European projects that leverage sensitive/protected data, working closely with the LNDS team as well as with external project participants in various working groups. WHAT YOU WILL DO * Analysis and interpretation of legal and/or data governance requirements in secondary use of sensitive data, based on the legislation, prevailing legal and ethical norms, existing guidelines and, where applicable, case law.  * Development of policies, guidelines, and technical requirement frameworks to enable solutions for ethico-legal compliance when pursuing secondary use of sensitive/protected datasets.  * When assisting external partners with their ethico-legal compliance efforts, you will provide analyses of planned operations and workflows as well as provide support related to data protection impact assessments (DPIAs) and other privacy/impact assessments.  * Development of, or contribution to practical tools, templates, guidance, training and other instruments for ELSI compliance. * Engagement in European working groups and consortia, including preparation of content for periodic meetings, contribution to drafting or reviewing formal documents or deliverables, writing of meeting minutes, and interaction with the working group members WHO YOU ARE * A master’s or PhD degree with several years of work experience in data protection, privacy, data governance, and/or data stewardship  * Candidates with the following background are particularly encouraged to apply:  * Legal professionals, compliance specialists or legal scholars with background in data protection or data governance * Data scientists (e.g., statisticians, bioinformaticians) with considerable experience in assisting with legal or institutional compliance matters related to data-driven research projects * Data stewards, data managers, and data governance specialists experienced in the management of sensitive/protected data  * Number of years of relevant experience: 5 to 10 years (years spent to acquire a PhD degree count as work experience).  * Familiarity with the key European legal and regulatory frameworks, namely: the GDPR, the AI Act, and the Data Governance Act. Familiarity with any other national/European legal frameworks or institutional ethics procedures around secondary use of sensitive data is a strong plus.  * Familiarity with the tools and frameworks used in data governance contexts. (e.g., Data Management Plans, implementation of FAIR principles, procedures for requesting and granting data access in secure processing environments)  * Experience with data protection by design and default workflows, data protection/privacy risk assessments, and other related assessments * Proficient in English  * Proficient in French  * You are enthusiastic about the legal aspects of data research or the conceptual and/or technical implementation of data protection principles for workflows.  * Good communication skills (ability to listen, understand and convey your ideas) and the ability to articulate clearly the ELSI needs to a diverse audience (scientists, legal experts, policy professionals, etc)  * Creative, solution-oriented mindset with strong analytical skills.  * You have critical thinking skills; you are adaptable and flexible.  * You have cultural intelligence and diversity consciousness.

Luxembourg National Data Service

WHO WE ARE Luxembourg National Data Service (LNDS) is a brand of PNED G.I.E. an organisation created by the Luxembourg Government, to implement Luxembourg’s strategies in research, innovation, and digitalisation. LNDS enables value creation from secondary use of data, for public and private partners and supports the sharing and re-use of public sector data, in a trustable manner. The LNDS service portfolio includes know-how, capabilities, tools, infrastructure, and data services. Through efficient & responsible use of data and improving the secondary use of data, LNDS will support the acceleration of economic, ecological, and societal transitions. www.lnds.lu | LNDS on LinkedIn PURPOSE OF THE JOB / PROJECT Ready to play a key role in shaping and improving innovative data solutions within a dynamic Agile environment? Join our team and contribute to impactful European-funded initiatives that drive innovation across key data domains. You will have the opportunity to work on strategic projects suchas SCAILED, which promotes the responsible adoption of AI in the biotech sector, EuropeAI, focused on developing sovereign and trustworthy Generative AI solutions for public administrations and PANDAI: AI-driven pandemic monitoring and response observatory. As a Data Steward, you will contribute to the design and development of new services and project-related tools, helping deliver high-quality solutions and strengthen LNDS's service capabilities within these subsidy-funded initiatives.  As a Data Steward, you will play a central role in the delivery, enhancement and scaling of LNDS’s Data Management (DM) and Data Stewardship (DS) services, which support responsible, systematic, and impactful data re-use across Luxembourg’s research and public sectors. Working closely with data providers, users, domain experts and LNDS partners, you will identify data stewardship needs,  translate requirements into service improvements, and contribute to the continuous evolution of LNDS’s service portfolio. You will help organisations establish effective data lifecycle management and preservation practices, facilitate access to sensitive data under relevant data-sharing frameworks, and promote the adoption of national and international standards and best practices. In collaboration with internal teams—including technology, information security, data science, data engineering, legal, and ELSI experts, and the Data Protection Officer—you will ensure compliant, efficient and high-quality service delivery. You will also contribute to knowledge development, training, community-building, and outreach activities, while gathering and translating requirements arising from LNDS mandates and project engagements into new service features and improvements. Through this role, you will help drive service quality, value creation, cross-functional collaboration and the scalable delivery of data stewardship capabilities across the Luxembourg data ecosystem. WHAT YOU WILL DO * Deliver LNDS DM/DS services including any other service that will emerge and evolve in the future. Offer service delivery via various methods including community engagement, helpdesk, and consultancy. * Maintain the DM/DS knowledge base and toolbox used during service development and delivery. * Assist prospective data users in placing access requests for protected data. Advise applicants on fulfilling access application forms and required documents. * Collaborate with the LNDS ELSI team to perform Data Protection Impact Assessments (DPIA) for data processing activities concerning sensitive data. * Contribute to efforts on inventorisation of research and public sector datasets by curating metadata on data custodians, provenance, and use restrictions. * Prepare and maintain project documentation, including Data Management Plans (DMPs) and other deliverables, such as FAIR implementation and data governance framework, required for European-funded projects. * Participate in European initiatives and projects related to data governance and Artificial Intelligence. * Contribute to and continuously improve community engagement activities, and establish a community events calendar  * Provide training on DM/DS best practices, tools, and related LNDS services. * Support the development of internal processes and guidelines to support relevant information security and data protection compliance and certifications. * Engage in (inter-)national projects related to DM/DS service development. WHO YOU ARE * MSc or PhD in natural science or technology, or social science with technical skills. * 2 to 5 years of experience, including relevant ones in the following areas: 1. Data stewardship 2. Data management 3. Community coordination, outreach and training. * Experience in one or several of the following topics: 1. Area-specific data management, such as research data management (RDM), data collaboratories, or data governance in the enterprise. 2. Ethically and legally compliant stewardship of sensitive data. 3. Community building and management. * Working knowledge in data lifecycle management and FAIR data principles (Findability, Accessibility, Interoperability, and Reuse) for data stewardship. * Good experience in writing (white papers, documentation, reports, policies) and creating content for the readership of national stakeholders and the public (online guides, tutorials). * Working knowledge of the GDPR and its relevance to data management and stewardship. * Working knowledge of one programming language (Python or R). * Working knowledge of basic website authoring (markdown, jinja, HTML). * Working knowledge of the Agile Methodology. * Excellent verbal communication skills in English. Knowledge of French will be a significant advantage. * Service and collaborative attitude. * Ability and willingness to interact closely with stakeholders. * Ability to handle multiple assignments while working independently and effectively under deadlines.