Job Summary & Responsibilities
BUSINESS UNIT AND ROLE OVERVIEW
The role sits within the Legal team (Employment Law Group) and will be the sole lawyer responsible for EMEA Data Protection.
RESPONSIBILITIES
• Provide legal advice to company affiliates in the USA on the full range data protection issues as well as select information security / cybersecurity issues
• Work with global privacy counsel, compliance, technology and other stakeholders to build-out the existing privacy program in preparation for the new EU General Data Protection Regulation
• Prepare / assist in the preparation of privacy impact assessments
• Review data leakage incidents and make determination as to whether any notifications are required. Draft / review and submit such notifications
• Prepare and submit data protection notifications / registration with applicable data protection authorities
• Advise colleagues in the Employment Law Group on matters pertaining to employee privacy (including subject access requests, monitoring programs, notice and consent requirements)
• Review and as needed uplift existing policies and procedures regarding data protections, Draft / review new policies, procedure, best practice documents, as needed
• Review and negotiate data protection and information security terms in vendor agreements, confidentiality agreements, etc.
• Prepare data protection-related training materials for use online, via videoconference and in live sessions
• Liaise with colleagues in the US and Asia to promote consistent data protection / privacy practices globally
• Monitor and respond to developments in privacy and information security (i.e., new laws, regulations, important case decisions, regulatory guidance, etc.)
• Advise on privacy issues arising from the full range of marketing efforts and Web-related advertising activities:
SKILLS / EXPERIENCE
• Legal degree / qualification
• Minimum 5 years solid experience with European data protection laws
• In-house experience a plus
• Background or demonstrated interest in technology a plus
• Experience drafting policies, procedures, notices and consents
• CIPP (Certified Information Privacy Professional) accreditation a plus
• Good leadership skills, demonstrated project management experience
• Must be comfortable taking the initiative and working with minimal supervision
• Effective communicator; experience preparing and conducting data protection training
