Senior Legal Counsel, Privacy and Data Protection

Posted 1hrs ago

Employment Information

Education
Salary
Experience
Job Type

Report this job

Job expired or something wrong with this job?

Job Description

Senior Legal Counsel advising Nielsen’s media business on GDPR, data protection, and commercial privacy matters. Managing complex privacy workstreams and supporting European products, partnerships, and operations.

Responsibilities:

  • Provide senior legal guidance on EU/EEA privacy compliance, data governance, and risk mitigation
  • Independently manage complex privacy workstreams and support Nielsen’s European privacy program
  • Serve as a trusted advisor to local sales and business teams
  • Work closely with Product, Engineering, Data Science, Information Security, Procurement, Sales, Marketing, and Legal colleagues across jurisdictions
  • Advise on GDPR, national implementing laws, EDPB guidance, ePrivacy requirements, marketing and consumer protection rules, and related European digital regulations
  • Translate legal developments into guidance, contract language, policies, notices, processes, and implementation requirements
  • Draft, review, and negotiate data processing agreements, data protection exhibits, data sharing and data use agreements, data transfer arrangements, and privacy provisions in commercial contracts
  • Support customer agreements, proposals, product offerings, data services, partnerships, and commercial opportunities
  • Conduct and oversee PIAs/DPIAs, transfer impact assessments, legitimate interest assessments, and other privacy risk assessments
  • Conduct privacy due diligence on third parties, vendors, customers, and strategic partners
  • Advise on adtech, audience measurement, analytics, identity, cookies, pixels, SDKs, targeted advertising, consent management, data monetization, and media and marketing data practices
  • Assess data collection, use, disclosure, retention, and deletion activities for compliant product launches and operational changes
  • Communicate with or support communications with data protection authorities and supervisory authorities
  • Support privacy incident and data breach response, data subject rights escalations, regulatory inquiries, audits, and compliance matters
  • Improve privacy program materials, including policies, procedures, playbooks, templates, training, records of processing, data inventories, retention requirements, and compliance reporting
  • Monitor EU/EEA and national privacy law, enforcement trends, and digital regulation; assess business impact and communicate recommendations

Requirements:

  • Extensive experience practicing privacy, data protection, technology, commercial, or related legal work in-house, with a track record of producing high-quality independent work
  • Law degree or equivalent legal qualification
  • Qualification or admission in the UK is required
  • Deep, practical knowledge of the GDPR and applicable national privacy and data protection laws in at least one relevant European jurisdiction
  • Experience conducting or overseeing DPIAs/PIAs, transfer impact assessments, legitimate interest assessments, and privacy risk assessments
  • Experience drafting, reviewing, and negotiating DPAs, data protection exhibits, and other privacy-related contract terms
  • Experience advising business, sales, product, technology, or commercial teams on complex privacy issues
  • Experience engaging with or supporting communications to supervisory authorities, regulators, or other public-sector stakeholders is preferred
  • Strong legal research, writing, negotiation, analytical, and issue-spotting skills
  • Ability to exercise sound judgment and build consensus among diverse stakeholders
  • Excellent written and verbal English communication skills
  • Fluency in an additional European language is a plus
  • CIPP/E certification is greatly preferred but is not a hard requirement
  • CIPM, CIPT, or an equivalent privacy credential is a plus
  • Adtech, martech, media measurement, audience analytics, data licensing, or digital advertising experience is strongly preferred
  • Knowledge of U.S. privacy and data protection requirements is an advantage
  • Knowledge of APAC privacy and data protection regulations is an advantage
  • Familiarity with international data transfers, standard contractual clauses, cross-border data sharing, consent and preference management, privacy management tools, data mapping, and records of processing activities

Benefits:

  • Competitive salary and benefits
  • Varied area of responsibility
  • Open corporate culture with numerous development opportunities
  • Ability to work independently in a motivated and friendly team
  • Informal atmosphere in a dynamic media company
  • Opportunities for ownership and personal development