Summary of Job Description:The Privacy Counsel provides professional legal advice and counsel on data privacy, data protection, and information governance matters, supports compliance with applicable privacy laws, and manages privacy risk across the organization. This position advises on privacy aspects of business initiatives and technology implementations, reviews and negotiates data protection terms in vendor and commercial agreements, and leads or supports privacy impact assessments and third-party privacy reviews. The Privacy Counsel reviews and prepares privacy policies, notices, and procedures, drafts legal memoranda and related documents, and supports privacy incident response and compliance initiatives. This position partners with different departments and provides training to business stakeholders on privacy requirements and best practices.
Job Responsibilities:- Advises on compliance with applicable data privacy and protection laws (e.g., CCPA/CPRA, GDPR, and other U.S. state laws), ensuring alignment with business practices.
- Manages and supports data subject rights requests (DSARs), including review of responses, issue-spotting, and process improvements; conduct and review Privacy Impact Assessments (PIAs/DPIAs) for new technologies, vendors, products, and business initiatives.
- Reviews, drafts, and negotiates privacy-related contractual provisions, including Data Processing Agreements (DPAs) and vendor data protection terms; partner with Procurement, IT, Cybersecurity, and Risk Management to assess and mitigate third-party privacy risk.
- Supports the development, maintenance, and implementation of privacy policies, notices, disclosures, and internal processes to ensure accuracy and regulatory compliance.
- Advises on cookie, tracking, and consent management matters in coordination with Marketing and Digital teams.
- Provides guidance on data governance and data lifecycle issues, including data minimization, retention, and deletion.
- Assists with privacy incident and data breach response efforts in coordination with Legal, IT, Cybersecurity, and Risk.
- Monitors evolving privacy laws, regulations, and enforcement trends and assesses potential business impact.
- Supports privacy considerations related to AI, analytics, and other data-driven initiatives.
- Contributes to incident response efforts, including assessing and advising on data breaches or security incidents from a legal and regulatory perspective.
- Delivers clear, timely, and business-oriented privacy advice to stakeholders across the organization.
How we reward you:- Hybrid remote schedule
- 401K with company match
- Yearly bonus opportunity*
- Full medical, dental, and vision insurance *
- On-site fitness center, biometric screen, and flu shot clinic
- Discounts at Panda restaurants, theme parks, and gym memberships
- Paid time off starting at 15 days with 7 federal holidays*
- Continuous education assistance and scholarships*
- Income protection including Disability, Life and AD&D insurance*
- Bereavement leave*
*Benefits available for eligible permanent full time associates
Your background and experience: - JD degree and licensed to practice law in California.
- 4+ years of relevant experience
- CIPP/US or similar certification preferred
- Successful completion of initial and periodically required trainings.
- Obtaining a valid Food Handler's Card within 30 days of employment is a requirement of this position.
Pay Range: L2: $136,500-158,000/ Annual
#LI-CC2
#LI-Hybrid
