Overview
This role involves serving as Privacy Counsel within the Corporate Legal team, focusing on supporting and advancing the global privacy and corporate product program. The position emphasizes product counseling and advising technology teams that support corporate products such as loyalty programs and advertising platforms. Reporting to the VP of Global Privacy and Corporate Product, the role ensures that products, platforms, and data-driven initiatives comply with applicable privacy and data protection laws while enabling innovation and growth.
Responsibilities
Privacy Counsel
- Advise on global privacy and data protection laws and regulations, including U.S. state privacy laws (e.g., CCPA/CPRA), GDPR, and other international frameworks.
- Provide practical, business-focused guidance on the collection, use, sharing, retention, and protection of personal data across products and operations.
- Support the development, implementation, and maintenance of privacy policies, notices, and internal governance standards.
- Advise on data incidents and regulatory notification requirements across various jurisdictions.
Product & Technology Counseling
- Collaborate closely with product management, engineering, data, and technology teams to embed privacy considerations into product design, development, and deployment ("privacy by design").
- Review and advise on privacy implications of new products, features, technologies, and data uses, including conducting and supporting privacy impact assessments (PIAs).
- Counsel on data-driven initiatives such as analytics, personalization, marketing technologies, and emerging technologies like AI from a privacy and data governance perspective.
Commercial & Vendor Support
- Review, draft, and negotiate privacy and data protection provisions in commercial agreements, including data processing agreements and vendor contracts.
- Support third-party risk management efforts related to data protection and privacy compliance.
Regulatory & Risk Management
- Monitor and assess evolving privacy and data protection laws, regulatory guidance, and enforcement trends, advising on business impacts.
- Support responses to data subject requests, regulatory inquiries, and privacy-related incidents in coordination with Legal, Compliance, and Security teams.
- Assist with regulatory readiness, audits, and internal assessments related to privacy compliance.
Strategic Counsel
- Provide proactive privacy advice to business stakeholders, balancing legal risk with business objectives.
- Contribute to the ongoing development of the global privacy program through process improvements, training, and cross-functional collaboration.
Requirements
- Juris Doctor (JD) degree from an accredited law school.
- Licensed to practice law in the United States.
- Minimum 6–9 years of legal experience with a significant focus on privacy, data protection, and technology-related matters.
- Demonstrated experience providing product counseling and advising engineering, product, and technical teams.
- Combination of law firm and in-house experience strongly preferred.
- Experience supporting consumer-facing, retail, digital, or global technology businesses is a plus.
- IAPP Certifications (CIPP/US, CIPP/E, CIPM) are preferable.
- Strong ability to translate complex legal and regulatory requirements into clear, actionable guidance for technical and non-technical stakeholders.
- Familiarity with international privacy laws and cross-border data issues preferred.
- Excellent communication, collaboration, and organizational skills with the ability to manage multiple priorities in a fast-paced environment.
Compensation & Benefits
- Salary range: $175,000 to $225,000 (base pay only, excluding short-term or long-term incentives).
- Final compensation considers factors such as location, experience, qualifications, and training.
- The role requires on-site presence four days per week.
- Employees have the flexibility to work remotely up to four weeks per year, which can be taken in daily or weekly increments.
Location
- This position is primarily on-site with flexibility for limited remote work as described above.