Legal Counsel, Privacy

This is a fully remote position, open to applicants in Nevada.

📋 Description

• Deliver practical, business-focused legal guidance on U.S. and international privacy issues related to Nielsen’s products, services, commercial relationships, and internal operations.

• Assist in the development and execution of Nielsen’s privacy program.

• Provide advice on privacy compliance, data governance, and risk mitigation strategies.

• Draft, review, and negotiate Data Processing Agreements (DPAs), data protection and security clauses, data usage and sharing contracts, and associated privacy provisions.

• Conduct and support Privacy Impact Assessments (PIAs) and Data Protection Impact Assessments (DPIAs), identify risks, suggest mitigations, and integrate privacy by design and by default principles.

• Perform privacy due diligence on third parties, vendors, customers, and strategic partners.

• Provide counsel on ad technology, audience measurement, analytics, identity management, cookies, pixels, Software Development Kits (SDKs), targeted advertising, consent management, data monetization, and media/marketing data practices.

• Collaborate with Product, Engineering, Data Science, Information Security, Procurement, Sales, Marketing, and other stakeholders.

• Support responses to privacy incidents and data breaches, as well as escalations of consumer and data subject rights, regulatory inquiries, audits, and other privacy compliance issues.

• Contribute to the formulation of policies, procedures, playbooks, templates, training materials, records of processing, data inventories, and compliance reporting.

• Stay updated on privacy and data protection laws and enforcement trends, providing relevant recommendations.

• Manage multiple priorities in a dynamic, global setting while delivering clear, timely, and pragmatic legal advice.

⛳️ Requirements

• 2–5 years of experience in privacy, data protection, technology, commercial law, or related legal fields.

• Juris Doctor (J.D.) or equivalent legal qualification.

• Admission to the bar of at least one U.S. state.

• Minimum of 2 years’ experience with U.S. state privacy regulations, including the CCPA/CPRA and other comprehensive state privacy laws.

• At least 2 years’ experience conducting or supporting DPIAs/PIAs and privacy risk assessments.

• Proven experience in drafting, reviewing, and negotiating DPAs and other privacy-related contractual terms.

• Experience advising both data/service buyers/customers and sellers/providers.

• Strong skills in legal research, writing, negotiation, analysis, and issue identification.

• Ability to articulate complex privacy requirements in straightforward business language.

• Capacity to work collaboratively with cross-functional and international teams.

• Ability to demonstrate sound judgment, manage competing priorities, and function effectively with moderate supervision.

• Knowledge of APAC privacy and data protection regulations, especially India’s DPDP framework, Australia’s Privacy Act and Australian Privacy Principles, or South Korea’s PIPA (preferred).

• CIPP/US certification (preferred).

• Experience in adtech, martech, media measurement, audience analytics, data licensing, or digital advertising (strongly preferred).

• Familiarity with GDPR/UK GDPR, international data transfers, cross-border data sharing, consent and preference management, IAB frameworks, privacy management tools, data mapping, and records of processing activities.

• Additional privacy certifications such as CIPM, CIPT, or equivalent (a plus).

🏝️ Benefits

• Comprehensive health and wellness plans.

• 401(k) plan with a company match from Nielsen.

• Generous paid time off policy.

• Company-provided vehicle (depending on the role).

• Eligibility for discretionary incentives/bonuses (depending on the role).

• Potential for bonuses, equity, or other incentives.