The Chief Privacy Officer (CPO) is IDEXX's enterprise leader for global personal data privacy strategy and execution, and a key partner on cybersecurity and AI governance risk. The CPO builds and runs IDEXX's Privacy Center of Excellence, ensuring compliance with applicable data protection laws worldwide. In addition, the role provides legal and compliance guidance in furtherance of cybersecurity and AI governance maturity. The role will sit at the epicenter of the legal convergence of these fast-moving and complex areas.
The role partners closely with Legal, Compliance, IT, Information Security, Product Development, Marketing, HR, Commercial Operations, and Executive Leadership to adapt the privacy framework to business needs while managing risk. The CPO may also serve as, or oversee, IDEXX's Global Data Protection Officer functions where required by applicable law and helps build the policies and processes needed to support compliance with applicable global cybersecurity and AI regulations.
Key ResponsibilitiesEnterprise Privacy Leadership- Develop and execute IDEXX's global privacy strategy and operating model.
- Monitor emerging privacy laws, regulatory guidance, and enforcement trends worldwide.
- Lead the design and maintenance of global privacy policies, standards, procedures, and controls.
- Oversee privacy impact assessments, data protection impact assessments, cross-border transfer assessments, and privacy-by-design processes.
- Serve as executive sponsor of the Global Privacy Steering Committee.
- Drive privacy risk identification, mitigation, reporting, and governance across all business functions.
- Advise executive leadership on strategic privacy risks affecting growth, innovation, and customer trust.
- Establish multi-year strategic roadmaps supporting organizational growth and digital transformation.
- Represent IDEXX with regulators, industry groups, customers, partners, and external stakeholders.
Cybersecurity and AI Governance Partnership- Partner with the Chief Information Security Officer to build an integrated privacy and cybersecurity governance framework.
- Advise on cyber-related regulatory obligations, including breach notification and incident-reporting duties under the EU Cyber Resilience Act, in partnership with the Chief Corporate and Securities Counsel (U.S. securities disclosure) and Chief Commercial Counsel (contractual disclosure obligations).
- Support enterprise cybersecurity and AI incident response, crisis management, and post-incident remediation.
- Serve as first point of legal contact for enterprise-wide AI governance policy guidance, advising leadership on the legal, ethical, and regulatory implications of AI/ML systems.
- Monitor emerging cybersecurity and AI regulatory frameworks (including the EU Cyber Resilience Act and EU AI Act) and drive required compliance activity.
- Serve on relevant governance committees and cross-functional review boards.
- Drive alignment between privacy, cybersecurity, AI, and broader enterprise risk management programs, including data management.
QualificationsEducationJD, LLM, Master's degree, or equivalent advanced degree preferred.
Relevant certification desirable: CIPP/E, CIPP/US, CIPM, or CIPT.
Experience- 10+ years of progressive experience in privacy, compliance, legal, cybersecurity, or AI/ML governance.
- Experience leading global privacy programs at a multinational organization.
- Demonstrated experience partnering with a CISO on personal data breach response.
- Experience with AI governance and emerging AI regulatory requirements.
- Experience operating across complex global regulatory regimes: GDPR, UK GDPR, CCPA/CPRA, LGPD, APAC privacy laws, and emerging AI regulation.
- Proven ability to influence executive leadership and cross-functional stakeholders.
Success Profile- Sound, courageous judgment under regulatory ambiguity - much of AI governance law is still unsettled.
- Executive presence and the ability to influence without direct authority across Legal, IT, Security, and the business.
- Intellectual rigor paired with humility and genuine cross-functional collaboration.
What Success Looks Like- Elevates IDEXX's privacy program into a fully integrated privacy, cybersecurity, and AI governance model.
- Builds scalable governance processes that enable global growth while protecting customers, employees, and other stakeholders.
- Positions IDEXX as a trusted steward of personal data.
