Senior Legal Counsel, Privacy and Data Protection

This is a fully remote position, open to applicants in United Kingdom.

📋 Description

• Deliver expert legal counsel on EU/EEA privacy compliance, data governance, and risk management.

• Independently oversee intricate privacy workstreams and support Nielsen’s privacy initiatives in Europe.

• Act as a reliable advisor to local sales and business teams.

• Collaborate closely with colleagues in Product, Engineering, Data Science, Information Security, Procurement, Sales, Marketing, and Legal across various jurisdictions.

• Provide guidance on GDPR, national implementing laws, EDPB recommendations, ePrivacy requirements, marketing and consumer protection regulations, and related European digital laws.

• Interpret legal developments into actionable guidance, contractual language, policies, notices, processes, and implementation requirements.

• Draft, review, and negotiate data processing agreements, data protection exhibits, data sharing, and data use agreements, data transfer arrangements, and privacy clauses in commercial contracts.

• Assist with customer agreements, proposals, product offerings, data services, partnerships, and commercial ventures.

• Conduct and supervise PIAs/DPIAs, transfer impact assessments, legitimate interest evaluations, and other privacy risk assessments.

• Perform privacy due diligence on third parties, vendors, clients, and strategic partners.

• Counsel on adtech, audience measurement, analytics, identity, cookies, pixels, SDKs, targeted advertising, consent management, data monetization, and media and marketing data practices.

• Evaluate data collection, usage, disclosure, retention, and deletion practices for compliant product launches and operational modifications.

• Engage with or facilitate communications with data protection authorities and supervisory bodies.

• Assist in responding to privacy incidents and data breaches, managing data subject rights escalations, regulatory inquiries, audits, and compliance matters.

• Enhance privacy program materials, including policies, procedures, playbooks, templates, training, processing records, data inventories, retention requirements, and compliance reporting.

• Keep abreast of EU/EEA and national privacy laws, enforcement trends, and digital regulations; assess business implications and relay recommendations.

⛳️ Requirements

• Significant experience in privacy, data protection, technology, commercial, or related legal fields in-house, with a proven ability to produce high-quality independent work.

• A law degree or equivalent legal qualification.

• Qualification or admission in the UK is mandatory.

• In-depth practical knowledge of the GDPR and relevant national privacy and data protection laws in at least one applicable European jurisdiction.

• Experience in conducting or overseeing DPIAs/PIAs, transfer impact assessments, legitimate interest evaluations, and privacy risk assessments.

• Proficiency in drafting, reviewing, and negotiating DPAs, data protection exhibits, and other privacy-related contractual terms.

• Experience advising business, sales, product, technology, or commercial teams on intricate privacy matters.

• Prior engagement with or support in communications to supervisory authorities, regulators, or other public-sector stakeholders is preferred.

• Strong skills in legal research, writing, negotiation, analysis, and issue identification.

• Ability to exercise sound judgment and build consensus among diverse stakeholders.

• Exceptional written and verbal communication skills in English.

• Proficiency in an additional European language is advantageous.

• CIPP/E certification is highly regarded but not mandatory.

• CIPM, CIPT, or equivalent privacy credentials are a plus.

• Experience in adtech, martech, media measurement, audience analytics, data licensing, or digital advertising is strongly preferred.

• Familiarity with U.S. privacy and data protection regulations is beneficial.

• Knowledge of APAC privacy and data protection regulations is advantageous.

• Understanding of international data transfers, standard contractual clauses, cross-border data sharing, consent and preference management, privacy management tools, data mapping, and records of processing activities.

🏝️ Benefits

• Competitive salary and benefits package.

• Diverse range of responsibilities.

• Open corporate environment with numerous opportunities for growth.

• Ability to work independently within a motivated and friendly team.

• Informal atmosphere in a dynamic media organization.

• Opportunities for ownership and personal development.