Principal Counsel, Privacy Law

Reporting to the Chief Integrity, Compliance and Privacy Officer, the Principal Counsel, Privacy plays a key and trusted role in Air Canada's Legal Affairs department by representing Air Canada and providing strategic legal advice on privacy, artificial intelligence, and anti-spam matters across multiple jurisdictions. The role enables business innovation in a highly regulated, data-driven environment. Responsibilities: • Provide legal support on complex or novel initiatives involving emerging technologies, new business models, or sensitive data uses. • Work closely with various branches including Customer Experience, Procurement, People, Culture and Communications, Loyalty, E-commerce, and Sales, to help drive company initiatives, including online or electronic-messaging marketing campaigns, contests and social media practices, advising on the legal requirements stemming from privacy, AI and anti-spam laws. • Provide expert legal advice on global privacy and data protection laws, including GDPR, CPRA, Quebec's Private Sector Act, PIPEDA, and other emerging regulations. This includes providing legal guidance for regulatory enquiries, privacy by design, privacy impact assessments and data subject requests. • Provide expert legal advice on global AI laws and other emerging regulations. • Provide expert legal advice on anti-spam laws, including CASL. • Monitor and keep abreast of developments in privacy, AI and anti-spam laws in Canada and internationally to ensure the continuing lawfulness of Air Canada policies and practices. • Help translate legal requirements into internal policies, controls, and training that are accessible and practical. • Assist in analyzing the nature of the parties to supplier contracts (i.e., whether they are "controllers" or "processors" of personal data) and trans-border data flows necessary to determine and advise on the appropriate data-protection provisions. • Advise on data collection, use, retention, sharing, and cross border transfers across products, services, and internal operations. • Support interactions with regulators and external stakeholders including preparation of positions and responses. • Support incident response activities, including breach assessment, notification analysis, and post-incident remediation. • Review AI use cases, conduct AI impact assessments and support AI governance frameworks. Qualifications • Minimum of ten years of experience in a leading law firm or an established in-house legal/privacy department; privacy accreditation an asset. • Membership in the Bar of a province essential; training in both common and civil law an asset. • Demonstrable, solid academic credentials and track record. • Solid understanding of and practical experience with PIPEDA, Quebec's Private Sector Act and CASL, as well familiarity with the common law and civil law of privacy. • Knowledge of the GDPR and other international privacy laws, and experience providing legal advice applicable to multiple jurisdictions also assets. • Experience in Cyber law an asset. • Strong analytical, negotiation, advocacy, written and oral communication skills. • Ability to understand, anticipate and meet business needs, effectively communicating and always remaining cognizant of related risks. • Self-motivated, resourceful and enjoys taking ownership of responsibilities. • Thrive in a dynamic and constantly evolving environment alongside a very cohesive team of professionals. • Drive for results and urgency and motivation towards achievement of goals. • Good business judgment and be strategic, pragmatic, and thorough with a solid ability to assess legal and business risk. • Creativity to consider, refine and merge different approaches to achieve workable solutions. • Capacity to work autonomously in a fast-paced environment, displaying composure in challenging situations. Conditions of Employment: Candidates must be eligible to work in the country of interest at the time any offer of employment is made and are responsible for obtaining any required work permits, visas, or other authorizations necessary for employment. Prior to their start date, candidates will also need to provide proof of their eligibility to work in the country of interest. Linguistic Requirements Based on equal qualifications, preference will be given to bilingual candidates.