SUMMARY:Provides legal guidance to business teams on privacy, data protection, and online safety compliance matters related to products, services, and platforms throughout the product lifecycle, and supports implementation of regulatory requirements and privacy program operations.
JOB DUTIES/ESSENTIAL FUNCTIONS: - Provides legal advice and guidance to business teams on privacy, data protection, and online safety requirements affecting company products and services.
- Responds to legal inquiries related to privacy, online safety, and data protection, including regulatory compliance, product design, data use, and consumer rights.
- Supports implementation of applicable privacy and online safety laws and regulations across the U.S., Canada, and Latin America.
- Monitors and maintains knowledge of relevant legal and regulatory developments and prepares summaries and guidance for internal stakeholders.
- Conducts legal review and clearance of product features and services, including evaluation of privacy, online safety and data protection risks.
- Supports the administration and operation of the company's Information Management Program, including data protection impact assessments, documentation, and compliance processes.
- Conducts privacy reviews of vendor and third-party engagements and supports related risk management processes in coordination with internal stakeholders.
- Reviews and provides guidance on privacy-related provisions in vendor and partner agreements.
- Supports artificial intelligence (AI) governance processes, including review of proposed use cases.
- Assists with privacy-related aspects of incident response, including coordination of information, documentation, and follow-up actions.
- Communicates and coordinates with internal and external stakeholders, including outside counsel.
- May have direct or indirect responsibilities for leading and developing a team.
SUMMARY OF REQUIREMENTS- Minimum of five years of privacy, data protection, online safety, cybersecurity, information governance, or technology regulatory compliance experience, preferably gained through a combination of law firm and in-house practice.
- Experience advising on legal aspects of product development, digital services, or technology platforms.
- Experience reviewing and analyzing legal and regulatory requirements - applying to business operations.
- Experience reviewing agreements involving data use, data sharing, or vendor services.
- Strong written and verbal communication skills.
- Law degree
- Membership in the Washington State Bar Association, or other comparable qualification.
- Valid passport may be required for international travel.
- Familiarity with Latin American, Canadian privacy laws and regulations preferred
- Experience advising on children's privacy, online safety, consumer protection, digital platform, emerging technology, and AI governance, emerging technology, or responsible AI initiatives matters is highly desirable.
- Experience supporting privacy program operations, information governance initiatives, incident response matters, or data lifecycle management activities.
- Experience providing practical legal advice to cross-functional product, technology, engineering, information security, international stakeholders, and cross-border regulatory compliance matters.
- Membership/certification in International Association of Privacy Professionals (IAPP) a plus.
Applicants must be legally eligible to work in the United States to be considered. Visa sponsorship is not available for this role.
This position is hybrid in Redmond, WA. Hybrid positions require regular onsite work following the schedule and guidelines for their division. This position is not open to fully remote status at this time.
This position includes the base pay range listed below, potential for a semi-annual discretionary performance bonus, and a comprehensive benefits package that includes medical, dental, vision, 401(k), and paid time off.
Pay Range:
$174,050-$313,350 USD
