Legal Counsel, Privacy and Data Protection

This is a fully remote position, open to applicants in United Kingdom.

📋 Description

• Offer sophisticated, practical, and business-focused legal counsel on EU/EEA privacy and data protection issues.

• Independently oversee intricate privacy workstreams and assist in Nielsen’s European privacy initiatives.

• Act as a reliable advisor to local sales and business teams.

• Provide senior-level legal insights on EU/EEA privacy compliance, data governance, and risk management.

• Draft, review, and negotiate data processing agreements, data protection exhibits, data sharing and usage agreements, data transfer arrangements, and related privacy stipulations.

• Support customer agreements, proposals, product offerings, data services, partnerships, and commercial ventures.

• Conduct and supervise PIAs/DPIAs, transfer impact assessments, legitimate interest assessments, and other privacy risk evaluations.

• Perform privacy due diligence on third parties, vendors, clients, and strategic partners.

• Provide advice on advertising technology, audience measurement, analytics, identity, cookies, pixels, SDKs, targeted advertising, consent management, and data monetization.

• Collaborate with Product, Engineering, Data Science, Information Security, Procurement, Sales, Marketing, and Legal stakeholders.

• Engage with or assist communications with data protection authorities and supervisory bodies.

• Support privacy incident and data breach responses, data subject rights escalations, regulatory inquiries, audits, and compliance issues.

• Enhance privacy program materials, including policies, procedures, playbooks, templates, training, records of processing, data inventories, retention requirements, and compliance reporting.

• Keep track of EU/EEA and national privacy law developments and convey recommendations to stakeholders.

⛳️ Requirements

• Extensive experience in privacy, data protection, technology, commercial, or related legal fields in-house, with a proven record of delivering high-quality independent work.

• Law degree or equivalent legal qualification.

• Qualification or admission in the UK is mandatory.

• Profound, practical understanding of the GDPR and applicable national privacy and data protection regulations in at least one relevant European jurisdiction.

• Experience in conducting or supervising DPIAs/PIAs, transfer impact assessments, legitimate interest assessments, and privacy risk evaluations.

• Proficient in drafting, reviewing, and negotiating DPAs, data protection exhibits, and other privacy-related contractual terms.

• Experience advising data or service buyers/customers and sellers/providers.

• Experience guiding business, sales, product, technology, or commercial teams on complex privacy matters.

• Strong skills in legal research, writing, negotiation, analysis, and issue identification.

• Ability to exercise sound judgment and foster consensus among diverse stakeholders.

• Exceptional written and verbal English communication skills.

• CIPP/E certification is highly preferred but not mandatory.

• CIPM, CIPT, or an equivalent privacy credential is a bonus.

• Experience in adtech, martech, media measurement, audience analytics, data licensing, or digital advertising is strongly preferred.

• Familiarity with U.S. privacy laws, including state privacy laws and CCPA/CPRA, is advantageous.

• Understanding of APAC privacy regulations is a plus.

• Knowledge of international data transfers, standard contractual clauses, cross-border data sharing, consent and preference management, privacy management tools, data mapping, and records of processing activities.

🏝️ Benefits

• Competitive salary and benefits package.

• Diverse area of responsibility.

• Open corporate culture with numerous opportunities for development.

• Ability to work autonomously within a motivated and friendly team.

• Opportunities for ownership and personal growth.

• Casual atmosphere in a dynamic media organization.