Privacy Counsel

SUMMARY

The Privacy Counsel will serve as a point person with business stakeholders and will translate complex legal requirements into actionable, scalable solutions with an aim of cultivating a data security and privacy by design culture. This role will be key in shaping and executing global privacy strategy, implementing compliance measures while enabling business innovation. This position will collaborate with various teams across the organization, as well as with external counsel.

• Provide practical, expert legal advice on US and global privacy and data protection laws (e.g., GDPR, CCPA/CPRA, HIPAA, etc.).
• Review new business processes and initiatives to embed data security and privacy by design at conception and through implementation.
• Contribute to team and resource development by participating in drafting sessions, sharing solutions, and contributing to the ongoing build out and refinement of playbooks and templates.
• Lead discussions with business teams, deftly translating data protection requirements into business processes, policies, and compliance controls.
• Review, draft, and when necessary, negotiate DPAs, SCCs, and other privacy terms when escalated by contracting teams.
• Lead privacy impact assessments (PIAs), data mapping exercises, and risk mitigation strategies.
• Enable compliance with cross-border data transfer requirements, by conducting and documenting transfer impact assessments (TIAs) to support SCCs, UK IDTA, and other mechanisms.
• Monitor regulatory developments, assess and communicate timely to stakeholders the impact on business operations.
• Support incident response and breach notification processes.
• Develop and deliver privacy training and awareness programs.
• Advise on AI, biometrics, and emerging technologies from a privacy perspective.
• Identify and assess privacy and risks, translating complex legal concepts into clear, accessible language that enables business teams to make informed decisions.
• Drive the development and continuous improvement of privacy program elements, including data protection playbooks, forms, contract templates, and resources.

• Partner cross-functionally to embed privacy by design.
• Serve as a primary liaison between Legal and various business functions on privacy matters, translating a complex matrix of laws and regulations into actionable requirements.
• Build strong, collaborative relationships with key stakeholders across the organization to ensure alignment on vision, priorities, and outcomes of business initiatives and projects.
• Represent the Legal team in working groups, committees, and cross-departmental initiatives that have a privacy impact.

No supervisory responsibilities.

• JD degree required with 4 years of relevant experience; or
• Must be admitted to practice, preferably in California.
• CIPP/US, CIPP/E, CIPM or similar certification preferred
• Equivalent combination of education and relevant experience

• Minimum of 6 years of legal experience, including no less than 5 years focused on global privacy and data protection.
• Strong understanding of global privacy frameworks and regulatory trends.
• Proven ability to help business teams operationalize privacy legal requirements and create sustainable compliance processes.
• Demonstrated success implementing privacy compliance measures, including conducting PIA/DPIAs, TIAs, data mapping, etc. in a matrixed organization.
• Thought leadership in privacy and data ethics.
• Experience in a technology, healthcare, or data-driven organization a plus.
• Experience in ad/mar tech, digital media, AI and data governance a plus.

• Excellent interpersonal communication, collaboration, and stakeholder management skills.
• Able to develop and deliver clear and concise presentations, to influence and collaborate effectively at all levels of the organization.
• Applies strong strategic thinking and problem-solving abilities to novel questions, with a data-driven approach to decision-making.
• Ability to…