Data Privacy Legal Counsel, NAM
Diageo
New York City, New York, United States
JOB DESCRIPTION About the role: The primary responsibility of the Data privacy Legal Counsel, NAM, is, in conjunction with the Senior Data Privacy Director and other members of the Data Privacy team, to help Diageo leverage data as a strategic and commercial asset. This role provides strategic guidance on digital marketing and use of new technologies; advising key partners within digital marketing and wider marketing team. The Data privacy Legal Counsel, NAM will have deep knowledge of data privacy in the United States and Canada, as well as an ability to deliver commercially-minded advice. The successful person will operate at a strategic and operational level, requiring an ability for pro-active critical thinking to identify creative solutions to challenges and high levels of credibility to deliver sophisticated messages in a nuanced, clear and persuasive manner. They will use their legal understanding to ensure the business is well advised of the options open to it: explaining legal concepts in plain English; adapting advice to the specific audience; working autonomously and taking initiative. They will need good interpersonal and influencing skills; being flexible in their approach to supporting different priorities and be confident to support with presentations and training sessions on data privacy and protection implications of new technologies / potential data uses, to diverse audiences. They will partner collaboratively with market representatives from: legal, data & D&T technology; HR / people & talent; and marketing / commercial. They will work collaboratively with other members of the Global Data Privacy Team, enabling Diageo to unlock data usage while remaining good data stewards. Capabilities and Responsibilities: The successful candidate will work as part of the Data Privacy team, establishing and maintaining the following capabilities: Support the establishment and maintenance of a fit-for-purpose data privacy capability within Diageo and the global function. The Data privacy Legal Counsel, NAM will be responsible for working with others to ensure appropriate policies, frameworks, processes and procedures are in place globally regarding the collection, use, storage and management of data within Diageo. This will include working with the Senior Data Privacy Director towards the right organization and capabilities to: Enable Diageo’s data privacy development, through digital transformation in all departments Ensure compliance with relevant laws, regulations, guidance and best-practice Establish a global approach to building data privacy savvy capability within and throughout the region, including training and assessment (as needed) Further building data privacy capabilities to craft and align with Diageo’s commercial, brand and digital transformation agenda, and to ensure Diageo has a fit-for-purpose data compliance environment regionally. Crafting the future: Be results-driven to assist in ongoing development of: Data management to facilitate compliant and secure collection and processing of data The normalization of data usage and data sharing Making informed decisions on how to improve future business outcomes. The role will also include working to ensure that Diageo has a strong reputation among key collaborators (e.g., employees, customers, consumers and regulators) for being responsible custodians of data. Effective Cost Management Ensure delivery of cost-effective legal support in context of business objectives and current risk environment; responsible for end-to-end legal spend and seek to eliminate unnecessary costs by optimizing use of internal and external legal resources. Key Responsibilities: Advise on legal and reputational matters within; marketing, technology, innovation and analytics; HR / people & talent; and D&T and IM&S for the markets within the region. Deliver training across various business units. Carry out and communicate privacy related legal research - Monitor and provide updates on changes to the regulatory landscape. Draft and advise on complex data protection-related documentation, including relating to data transfers, legitimate interest assessments and privacy impact assessments. Engaging in the drafting, negotiating and reviewing of DPAs and / or DP clauses in key strategic contracts. Lead complex privacy reviews and negotiations with significant risk and complexity affecting multiple business functions. The successful candidate will have the unique opportunity to shape their role within this function. You will have the benefit of working across multiple interesting and innovative projects and in a supportive and collaborative working environment. Collaborators and Impact: All business units within NAM, to ensure that Diageo’s approach to data enables the strategic transformation priorities and ensures compliance with relevant rules, guidance and best-practices. Members of the Digital & Technology and marketing market teams, in connection with ensuring: Diageo’s data management system facilitates the secure collection and processing of data There is a culture within Diageo that normalizes sharing data and making informed decisions on how to improve future business outcomes; Proper data analytics are implemented to enable Diageo to understand and assess the data it has access to Diageo has a strong reputation among key team members (e.g., employees, customers, consumers and regulators) for being responsible custodians of data. Members of in-market Commercial and Digital teams to ensure that data collection, storage and use furthers Diageo’s commercial and digital priorities, including across consumer, customer and brands. Market-based legal and executive teams, including in-market Legal Directors, in order to build data privacy/compliance capabilities throughout Diageo. This will be done in a manner consistent with the development and maintenance of a center of excellence model globally. Business Development and M&A teams to ensure that data privacy and commercial issues are considered at the outset of any acquisitions, disposals or other business development activity. Further the role will be responsible for ensuring that acquired data and data management policies are integrated into Diageo’s framework and approach. Human Resources teams and Employment Legal Counsel in order to provide data privacy and data management support in connection with any human resources or employment related matters where necessary. Qualifications and Experience Required: Membership in a State bar as an attorney, qualified to practice law as an in-house attorney in New York, with wide-ranging experience working on global matters. Experience advising on, and understanding of, data privacy and protection in the context of: digital marketing; HR / employment matters; and new technologies. Proven interest in understanding how technology works to deliver highly effective data privacy advice. 6+ years of legal practice in data privacy, gained in-house, or in a law firm. In-depth knowledge of a range of US state and Canada data protection and privacy laws and standard methodologies, including CPRA, CCPA, CAN-SPAM, PIPEDA, GDPR and PECR. Successful management of customers at all levels, resulting in strong and positive outcomes. The ability to deal well with ambiguity, complexity and working within a fast-paced, entrepreneurial and matrixed environment. Deep personal accountability for phenomenal performance. Additional spoken and written language(s) are a bonus. Excellent professionalism, commitment and integrity, passion for and experience of inspiring and leading people. Confident in and sensitive to different cultures and a passion for Diageo’s success. Ability to work within a matrix organization, maintaining sufficient involvement to manage and influence effectively.
