Legal Counsel, Privacy

This is a fully remote position, open to applicants in Nevada.

📋 Description

• Deliver practical, business-focused legal counsel on U.S. and global privacy issues pertaining to Nielsen’s products, services, commercial relationships, and internal operations.

• Assist in the creation and functioning of Nielsen’s privacy program.

• Provide guidance on privacy compliance, data governance, and risk mitigation strategies.

• Prepare, evaluate, and negotiate data processing agreements, data protection and security terms, data use and sharing agreements, and associated privacy provisions.

• Carry out and assist with privacy impact assessments and data protection impact assessments.

• Perform privacy due diligence on third parties, vendors, customers, and strategic partners.

• Offer advice on advertising technology, audience measurement, analytics, identity, cookies, pixels, SDKs, targeted advertising, consent management, data monetization, and related media and marketing data practices.

• Collaborate with Product, Engineering, Data Science, Information Security, Procurement, Sales, Marketing, and other stakeholders on data activities and compliant launches.

• Aid in privacy incidents and data breach responses, consumer and data subject rights escalations, regulatory inquiries, audits, and various privacy compliance issues.

• Contribute to the development of privacy policies, procedures, playbooks, templates, training materials, records of processing, data inventories, and compliance reports.

• Keep track of privacy and data protection laws and enforcement trends, providing recommendations accordingly.

• Manage multiple priorities in a dynamic, global setting, delivering clear, timely, and practical advice.

⛳️ Requirements

• 2–5 years of experience in privacy, data protection, technology, commercial, or similar legal fields.

• J.D. or an equivalent legal qualification.

• Admission to the bar in at least one U.S. state.

• Minimum of 2 years of experience with U.S. state privacy laws, including CCPA/CPRA and other comprehensive state privacy regulations.

• At least 2 years of experience in conducting or supporting DPIAs/PIAs and privacy risk assessments.

• Proficiency in drafting, reviewing, and negotiating DPAs and other privacy-related contractual terms.

• Experience in advising both buyers/customers and sellers/providers of data or services.

• Strong skills in legal research, writing, negotiation, analysis, and issue identification.

• Capability to articulate complex privacy requirements in straightforward business terms.

• Ability to work effectively with cross-functional and international teams.

• Aptitude for exercising sound judgment, managing competing priorities, and functioning well under moderate supervision.

• Knowledge of APAC privacy and data protection regulations is preferred, especially India’s Digital Personal Data Protection framework, Australia’s Privacy Act and Australian Privacy Principles, or South Korea’s Personal Information Protection Act.

• CIPP/US certification is a considerable advantage.

• Experience in adtech, martech, media measurement, audience analytics, data licensing, or digital advertising is strongly preferred.

• Familiarity with GDPR/UK GDPR, international data transfers, cross-border data sharing, and related contractual mechanisms.

• Knowledge of consent and preference management, IAB frameworks, privacy management tools, data mapping, and records of processing activities.

• Additional privacy certifications, such as CIPM, CIPT, or equivalent credentials, are a plus.

🏝️ Benefits

• Comprehensive health and wellness plans.

• 401(k) with a Nielsen company match.

• Generous paid time off policy.

• Company-provided vehicle, depending on the role.

• Discretionary incentive/bonus eligibility.

• Potential eligibility for bonuses, equity, or other incentives.