PRIVACY LAW JOB LISTINGS

This page gathers privacy job listings. Check links for further details, including salary, qualifications, location, and responsibilities. We advise you to apply even if you don’t quite meet requirements for years of experience, as employers often don’t adhere strictly to such requirements. Please write to us if you know of privacy law job listings we should include.

NOTE: As we often don’t know when positions are filled, not all positions listed on this page are still open. Posted dates are approximations.

* * *

Capital One – Senior Manager, Senior Counsel – Enterprise Data and Cyber

Responsibilities:

Strategic Counseling & Support: Providing proactive, business-minded legal support and counsel to business and technical stakeholders across both the cybersecurity and eData organizations.
Cybersecurity & Incident Response Support: Supporting legal guidance for cybersecurity operations, incident response preparedness, and technical risk management, helping ensure alignment with regulatory and legal requirements.
Enterprise Data & Risk Management: Assisting in identifying, evaluating, and managing legal risks associated with data use, privacy, emerging technology, and data governance.
Cross-Functional Collaboration: Collaborating closely with Legal colleagues, Compliance, Risk, and technical teams to help develop practical, legally sound solutions for novel issues.
Regulatory & Legislative Monitoring: Monitoring key legal, regulatory, and legislative developments in cyber and data realms to help inform business decisions and risk strategies.
Disclosure & Reporting Support: Assisting with reviewing relevant legal disclosures, regulatory filings, and executive reporting related to cybersecurity and eData.

Posted Nov 5, 2026

PayPal – Sr Legal Counsel, Privacy

Responsibilities:

Provide clear, pragmatic, and solution-oriented legal advice to enable business strategy while managing legal risk.
Participate in complex problem resolution, providing expert legal advice on high-stakes issues and disputes.
Ensure compliance with relevant laws and regulations.
Partner with business counterparts across the enterprise to help drive the delivery of effective legal services.
Manage legal risks and safeguard PayPal’s legal interests, developing comprehensive risk management frameworks.
Escalate complex issues to senior legal leadership where appropriate.

Posted Nov 5, 2026

Lidl US – Senior Corporate Counsel – Data Privacy and Compliance

Responsibilities:

Regulatory Advice & Strategy: Serve as the subject matter expert on evolving domestic and international data privacy and security laws, advising leadership on legal risk, legislative trends and strategic compliance.
Incident Response & Cyber Legal Leadership: Direct the legal strategy for cybersecurity incidents and potential data breaches, overseeing privileged investigations, assessing notification obligations under strict statutory deadlines, and managing regulatory reporting.
Privacy-by-Design & DPIA Governance: Establish the legal framework for Data Protection Impact Assessments (DPIAs/PIAs) and partner with Product, Engineering, and Business teams to integrate privacy-by-design into new products, digital services, and AI initiatives.
Policy Architecture & Training: Draft, update, and operationalize enterprise-wide privacy and data security policies, governance standards, and employee compliance training programs.
Consumer Rights (DSAR) Escalations: Steer and oversee legal framework of the Data Subject Access Request (DSAR) program, advising on complex requests, statutory exceptions, and contentious data deletion or portability matters.
Regulatory Matters & Outside Counsel: Represent the company in inquiries, audits, and proceedings before data protection authorities, work with external counsel and industry associations on regulatory matters and the advancement of data protection standards.
Commercial Transactions & Vendor Oversight: Guide third-party risk management by advising on and negotiating complex Data Processing Agreements (DPAs), cross-border transfer mechanisms, and vendor data security terms.

Posted Nov 4, 2026

Meta – Director and Associate General Counsel, Privacy

Responsibilities:

Manage a high-performing team responsible for advising on key privacy area risks, as well as on central risk initiatives for effective product counseling
Drive initiatives to meet evolving global privacy legal requirements, by advising product, business and legal stakeholders across Meta
Facilitate a consistent and sustainable approach to complex and novel privacy issues across the company by developing strategies, driving leadership alignment, and counseling on product implications
Maintain subject matter expertise in key privacy areas and evaluate impact of relevant global legal requirements, regulatory guidance, and enforcement actions
Develop resources and tools that enable counsel across the company to provide durable and consistent advice on privacy issues

Posted Nov 4, 2026

OpenAI – Counsel, AI Safety & Cyber Incident Response

Responsibilities:

Serving as legal lead on assigned cybersecurity and AI safety incidents, coordinating fact development, legal analysis and advising, cross-functional escalation, and follow-through with the response team.
Working with investigators to understand incident scope, attack paths, root cause, and affected systems and data, and potential third-party impacts, while helping teams distinguish established facts from gaps in the evidence.
Managing outside counsel and third party service provider engagements necessary to incident response.
Serving as key Legal point of contact for cross-functional teams.
Partnering with Privacy, Product, Regulatory, and other counsel to assess notification and reporting obligations, advise on timely customer and user communications, and coordinate third-party outreach and incident-related information sharing with industry peers and government partners.
Preparing concise incident updates and decision materials that distinguish established facts, uncertainties, options, and recommended next steps.
Developing severity-based escalation criteria, response playbooks, exercises, and clear decision and handoff processes for cybersecurity and AI safety incidents, adapting established practices to emerging model risks.
Supporting post-incident reviews, tracking agreed corrective actions, and turning lessons into practical improvements to safeguards and response processes.

Posted Nov 4, 2026

Kroger – Privacy Attorney

Responsibilities:

Ensure that the company complies with all applicable laws, rules and regulations related to privacy and data security
Provide expertise and guidance to legal colleagues (including product, employment and commercial counsel), Corporate Information Security, Procurement/Sourcing, product development and engineering teams
Identify and communicate the requirements of existing and new laws and/or regulations applicable to Kroger and any changes on a timely and ongoing basis
Draft responses to privacy and security related customer, associate, and regulatory inquiries and investigations.
Draft external privacy notices and disclosures, and manage/update internal policies and procedures to ensure compliance with laws regarding privacy and cybersecurity
Assist with enhancing, scaling and running the existing privacy program, including privacy operations and documentation; employee training; policy enforcement, monitoring and auditing; and incident response
Work with the Data Sharing Governance, Compliance, CIS and others to scope and perform data privacy risk assessments, contract reviews, mitigation and remediation, including data control design and monitoring, as well as the mitigation of privacy and security risks
Remain up-to-date on relevant consumer protection, privacy and data security laws and regulations, as well as on technological developments, threat vectors, and evolving industry standards

Posted Oct 27, 2026

Ladders – Privacy Counsel II

Responsibilities:

Counsel on privacy assessments and product-related issues, evaluating business implications and legal risk
Develop training materials and resources to provide current privacy guidance to various teams
Serve as a subject matter expert, offering strategic legal advice on data privacy and security matters
Monitor and advise on new privacy laws and regulations, leading policy development and compliance efforts
Review marketing initiatives to ensure adherence to data protection laws
Lead privacy program initiatives and risk management projects, ensuring accountability for outcomes
Draft and negotiate privacy and data security terms in contracts with partners and vendors

Posted Oct 26, 2026

Adobe – Senior Legal Counsel- Privacy

Responsibilities:

Collaborate with Product Legal, Engineering, Product, Security, and Marketing teams to guide the creation and application of Privacy-By-Design strategies for digital marketing products and technologies to manage privacy and security risks while fostering product innovation.
Serve as a strategic advisor to business leaders to help make privacy a competitive differentiator for Adobe.
Develop, apply, and evaluate privacy impact assessments for Adobe products and technologies, including new AI initiatives. Lead projects to simplify and improve the privacy assessment process.
Support Sales Legal and other legal teams on privacy negotiations with customers, partners, and vendors. Provide regular training, develop privacy templates and playbooks, and offer direct support for strategic deals. Identify and lead efforts to simplify privacy negotiations.
Be a privacy brand ambassador on enterprise customer calls and in meetings with external collaborators.
Be a privacy evangelist inside Adobe to help grow our culture of privacy (e.g., conduct trainings, represent the privacy team in product strategy and development sessions).
Assist with evaluating and implementing global self-regulatory and digital marketing requirements (e.g., NAI, DAA).

Posted Oct 25, 2026

Transamerica – Senior Counsel – Privacy, Cybersecurity and AI – Hybrid

Responsibilities:

Independently handle complex privacy, cybersecurity and AI legal matters with minimal supervision, serving as a trusted and collaborative member of the privacy team
Advise business stakeholders on privacy, cybersecurity and AI governance regulatory requirements, translating legal obligations into practical, actionable implementation strategies while effectively identifying, quantifying, and communicating risk to decision-makers
Partner on global AI governance initiatives, including reviewing AI use cases for legal and regulatory compliance and supporting the organization in successfully implementing AI governance frameworks
Support core privacy operations across the global enterprise, including privacy impact assessments (PIAs), data protection impact assessments (DPIAs), data subject access requests (DSARs), records of processing activities (RoPAs), and third-party privacy risk management
Draft, review, and negotiate privacy-related legal agreements, including data processing agreements and data transfer agreements
Design and implement scalable privacy and AI compliance frameworks and repeatable processes that support business growth while managing legal and regulatory risk across the globe
Identify training needs and develop and deliver privacy and AI regulatory training across the organization

Posted Oct 23, 2026

Leidos – Assistant General Counsel – Privacy & AI

Responsibilities:

Provide practical, risk-based legal advice on artificial intelligence, data privacy, and emerging technologies across corporate and customer-facing operations.
Advise on AI governance, including AI use-case risk review, vendor and third-party AI diligence, development of AI policies and standards, and compliance with emerging AI laws and frameworks.
Advise stakeholders on compliance with U.S. and international AI, privacy, and data protection laws, regulations, standards, and contractual obligations, including government contracting requirements and flow-down provisions.
Review, draft, and negotiate privacy and data protection provisions in customer, vendor, subcontractor, and technology agreements, including data processing agreements, Business Associate Agreements, and data security addenda.
Interpret and operationalize complex regulatory and contractual requirements, translating them into clear, actionable guidance for business and technical teams.
Partner with internal stakeholders to manage and mitigate data breaches and other security incidents, including advising on notification, reporting, and related contractual and regulatory obligations and managing outside counsel as appropriate.
Support the development, implementation, and continuous improvement of the company’s privacy and AI governance programs, ensuring alignment with information security and other governance and compliance functions

Posted Oct 21, 2026

GoodRx – Privacy Counsel II

Responsibilities:

Counsel on privacy assessments and product-related matters, resolving significant matters and evaluating business implications by applying broad expertise and privacy knowledge.
Develop training, playbooks, and FAQ libraries for various teams to ensure they have the most current privacy guidance
Act as a subject matter expert on all matters relating to privacy law, including providing practical, timely, strategic, and high-quality legal advice on data privacy and security matters
Actively monitor, brief, and advise on privacy laws and new legislative and regulatory developments, including taking lead on developing and updating policies and procedures and developing and updating internal work plans to comply with upcoming data privacy regulations
Lead in reviewing marketing initiatives to ensure compliance with data protection laws
Lead Privacy Program initiatives and risk management workstreams from start to finish, with accountability for results that may impact the entire function
Lead the reviewing, drafting, and negotiation of privacy and data security terms in contracts with business partners and vendors, including data processing agreements and data protection terms
Serve as an internal privacy subject matter expert, building cross functional networks and providing thought leadership on broader organizational initiatives; apply an understanding of business priorities to communicate complex privacy matters, influence diverse stakeholders, and guide the work of others
Support with vendor management for privacy, including managing vendor offboarding

Posted Oct 21, 2026

Medtronic – Director – Global Cyber Security Counsel

Responsibilities:

Serve as the primary legal advisor to Global IT Information Security leadership on cybersecurity governance, regulatory compliance, enforcement matters, and enterprise risk management initiatives.
Lead the development and enhancement of cybersecurity legal frameworks, policies, standards, governance processes, and internal controls supporting global operations.
Advise business and functional leaders on cybersecurity considerations related to strategic initiatives, technology transformation efforts, and operational risk management.
Support cybersecurity incident preparedness and response activities, including regulatory inquiries, investigations, audits, enforcement actions, and litigation matters.
Conduct cybersecurity legal due diligence for mergers, acquisitions, divestitures, and other business development activities, including integration and separation planning.
Counsel stakeholders on third-party cybersecurity risk, supply chain resilience, and contractual risk mitigation strategies aligned with regulatory and business requirements.
Partner with product security, privacy, compliance, communications, and business counsel teams to support secure-by-design initiatives and enterprise cybersecurity programs.
Monitor global cybersecurity regulatory, enforcement, and litigation developments and provide actionable guidance to business, legal, and compliance stakeholders.

Posted Oct 20, 2026

Sage – Senior Privacy Counsel

Responsibilities:

Leveraging your expert knowledge of data protection laws to provide high-quality legal advice to stakeholders across Sage;
Partnering with Product, engineering, sales and marketing teams, influencing Product decisions and embedding privacy by design principles from the outset;
Collaborating with regional colleagues and external counsel on different matters and data privacy risk incidents;
Contributing to maintaining Sage’s data privacy compliance framework, including policy review and development, while supporting the creation of external-facing materials such as privacy notices and consent notices;
Identifying and mitigating privacy risks, and providing expert input on compliance activities;
Leading advisory efforts on cookies, similar technologies, and digital advertising;
Carrying out horizon scanning to help Sage anticipate and adapt to a fast-changing privacy environment;
Contributing to the management of the data privacy operating model, and acting as a key contact for US and Canada local legal and data privacy matters; and
Developing and delivering training materials to colleagues across Sage.

Posted Oct 17, 2026

FanDuel – Counsel Senior Manager, Privacy & Data Security

Responsibilities:

Draft and/or update privacy notices for FanDuel’s various products and business lines.
Provide legal review for privacy and data security policies and procedures.
Maintain up-to-date expert knowledge of privacy, data protection, and AI laws, regulations, pending legislation and market practice.
Provide advice to FanDuel’s business teams on with applicable privacy, data security, and AI laws and regulations.
Review, draft and/or negotiate the privacy and data security portions of contracts with vendors and business partners, in collaboration with the Commercial Legal team.
Review artificial intelligence projects, acting as a subject matter expert in privacy, cybersecurity, and AI regulation. Coordinate as relevant with other stakeholders from Legal and Compliance to ensure appropriate legal review of other risks.
Advise on cybersecurity incident preparation and response.
Build close relationships with and be a trusted advisor to teams across the business.
Provide sound business judgment, confidence, a sense of ownership, drive, comfort making tough calls where the answer is not clear, and an aptitude to quickly learn the nuances of the internet, technology, and media businesses.

Posted Oct 16, 2026

Mastercard – Counsel II – AI, Cybersecurity, Privacy

Responsibilities:

Serve as the primary legal lead for matters relating to Mastercard’s ECR products.
Advise business, product, and technical teams throughout the product lifecycle, including privacy by design and regulatory reviews of new products, features, data uses, models, and go-to-market approaches.
Establish and maintain legal compliance frameworks and internal controls addressing privacy, credit reporting, consent management, data subject rights, AI and automated decision-making, and model risk management.
Coordinate legal analysis across jurisdictions and develop consistent positions for the application of local credit risk, privacy, AI, data use, and related regulatory requirements.
Support the review of new markets and strategic partnerships, including the use of outside counsel where local legal analysis is required.
Draft, review, and negotiate contract terms with strategic partners and key customers.
Communicate legal requirements, risk assessments, open issues, and proposed controls clearly to business leaders, product teams, technical stakeholders, and other members of the Law Department.

Posted Oct 14, 2026

TikTok USDS Joint Venture – Privacy & Cybersecurity Counsel

Responsibilities:

Regulatory Compliance & Strategy: Coordinate, monitor, and advise on changing US privacy laws and regulations with a focus on state-level privacy laws and AI governance rules. Assist with Privacy Impact Assessments (PIAs) and collaborate with security and product teams to embed Privacy by Design into JV roadmaps. Coordinate and oversee policies regarding data retention, data mapping, and subject access requests)
Incident Response & Cybersecurity: Serve as the legal lead on the Enterprise Incident Response team, directing privilege, risk assessments, and containment actions during data breaches or security incidents. Independently manage and coordinate necessary regulatory notifications and law enforcement outreach. Partner closely with Security Officer and security apparatus.
Commercial Transactions & Vendor Risk: Draft, review, and negotiate Data Processing Agreements and assist with complex tech vendor contracts. Advise corporate teams on privacy and cybersecurity due diligence. Support Third Party Risk Management processes as necessary.
Regulatory Engagement & Disputes: Represent the company before data protection authorities and state/federal regulatory bodies as needed. Coordinate with outside counsel on privacy or cybersecurity litigation and enforcement defense.

Posted Oct 14, 2026

Capital One – Senior Manager, Senior Counsel – Enterprise Data and Cyber

Responsibilities:

Strategic Counseling & Support: Providing proactive, business-minded legal support and counsel to business and technical stakeholders across both the cybersecurity and eData organizations.
Cybersecurity & Incident Response Support: Supporting legal guidance for cybersecurity operations, incident response preparedness, and technical risk management, helping ensure alignment with regulatory and legal requirements.
Enterprise Data & Risk Management: Assisting in identifying, evaluating, and managing legal risks associated with data use, privacy, emerging technology, and data governance.
Cross-Functional Collaboration: Collaborating closely with Legal colleagues, Compliance, Risk, and technical teams to help develop practical, legally sound solutions for novel issues.
Regulatory & Legislative Monitoring: Monitoring key legal, regulatory, and legislative developments in cyber and data realms to help inform business decisions and risk strategies.
Disclosure & Reporting Support: Assisting with reviewing relevant legal disclosures, regulatory filings, and executive reporting related to cybersecurity and eData.

Posted Oct 14, 2026

3M – Director and Assistant General Counsel, Global Privacy, AI and Cybersecurity

Responsibilities:

Provide global legal advisory services to 3M’s IT, cybersecurity and business stakeholders on applicable technology, artificial intelligence, cybersecurity, privacy, data protection and data laws.
Advise on the development, implementation and ongoing enhancement of 3M’s AI governance framework, including policies, standards, controls, risk assessment processes, escalation pathways and oversight mechanisms for responsible AI use.
Oversee 3M’s global external messaging applications governance program, including policies, standards, controls, processes and mechanisms for appropriate business communications governance measures.
Translate complex and evolving global legal and regulatory requirements into actionable guidance for information technology, cybersecurity, global business services, procurement, human resources, ethics, compliance and business teams.
Partner with cross-functional leaders to embed legal, privacy, cybersecurity, technology governance and responsible AI requirements into technology design, procurement, deployment, monitoring and lifecycle management processes.
Advise on legal, regulatory and governance matters involving hyperscale cloud environments to support secure, compliant and responsible adoption of AI, machine learning and advanced analytics across the enterprise.
Support major enterprise technology transformations, including ERP modernization, cloud migration and digital platform initiatives, translating complex technical, operational and security requirements into practical, risk-based legal solutions.
Support governance and compliance for enterprise digital initiatives, including cloud services, websites, accessibility, software platforms, ERP systems, data analytics, automation, generative AI, machine learning, digital products and emerging technologies.
Advise on cybersecurity legal matters, including incident response readiness, regulatory notification considerations, security governance, third-party risk, vulnerability management and related legal risk mitigation strategies.

Posted Oct 13, 2026

Erie Insurance – Counsel II – AI, Cybersecurity, Privacy

Responsibilities:

Assists with the organization and direction of the company’s legal activities.
Assists in directing the defense of the company against suits or claims, and assists in initiating legal actions to support the company’s claims against others.
Provides legal counsel and guidance to officers and other personnel on corporate and operational matters involving legal problems.
Prepares or reviews proposed contracts, leases and other formal agreements and legal instruments in order to safeguard the company’s interests. Reviews drafts of ERIE’s insurance policies, forms and endorsements.
Drafts and revises insurance contracts and related documents to ensure conformity with applicable statutes, regulations, administrative orders, circulars, bulletins and other applicable legal authority.
Researches and interprets statutes, regulations, case law, insurance department bulletins and other applicable legal authority. Provides legal advice and guidance to various departments of the company.
Provides legal research, advice and guidance on insurance claims.
Reviews proposed and existing legislation affecting the Erie Insurance Group and advises and consults with General Counsel, Deputy General Counsel and Senior Counsel on the position of the company with regard to such matters.
Counsels and advises corporate personnel on legal issues including, but not limited to, those related to real and personal property, taxes, advertising, trademarks, copyright and promotion programs, contracts, personnel matters, public relations, underwriting and claims interpretation.
Participates in trade associations and regulatory and legislative hearings and meetings as directed or requested.
Handles legal assignments as directed or requested.

Posted Oct 7, 2026

Intuit – Senior Assistant General Counsel – Privacy, Data Innovation & Protection

Responsibilities:

Leading People – The successful candidate will possess a proven track record managing geographically dispersed teams and leading through change with confidence. You will operate effectively in a complex, global, and matrixed organization, building collaborative relationships and a sphere of influence across product, engineering, legal, and data science functions. You must command respect while demonstrating willingness to deliver advice in the best interest of the company and its customers.
Business Mindset – The successful candidate will approach privacy as a business enabler and competitive differentiator. You have the focus, tenacity, and subject-matter mastery to drive key strategies within large and complex organizations. You will establish direction, obtain commitment from the groups you advise, and influence beyond your immediate organization.
Process Improvement – The successful candidate will assess current ways of working and, with their team, create self-service, automated pathways that extend the teams’ reach. This can include the development of guardrails, playbooks, and AI models that allow both the business teams and your legal counterparts to know and understand where privacy and data guardrails are necessary and how to apply them.
Strategic and Technical Acuity – The successful candidate will drive problem-solving at both abstract strategic and granular technical levels. You will engage credibly with engineering teams on system architecture, evaluate PETs vendor claims, and assess the legal implications of data product design decisions. You will anticipate regulatory developments and enforcement trends, appreciating implications for the company’s legal posture and creating actionable program guidance ahead of compliance deadlines.

Posted Oct 6, 2026

Cognizant – Senior Privacy Counsel

Responsibilities:

Provide authoritative legal counsel on US federal and state privacy laws, including HIPAA, HITECH, 42 CFR Part 2, CCPA, CPRA, and comprehensive privacy laws in Texas, Virginia, Colorado, Connecticut, and other states. Monitor and advise on emerging federal privacy and related AI legislation.
Support the negotiation and drafting of business associate agreements, data processing agreements, and data use agreements. Maintain and update contracting playbooks for privacy and data-security terms in master services agreements and vendor agreements.
Partner with product and engineering teams to implement privacy-by-design across products and solutions, including reviewing data flows, consent frameworks, and de-identification methodologies.
Lead privacy-incident response, including notification analysis under the HIPAA Breach Notification Rule and applicable state breach-notification laws. Coordinate incident management with security, communications, executive leadership, and other stakeholders.
Develop and maintain privacy policies, procedures, compliance documentation, training, and awareness initiatives. Manage regulatory inquiries and enforcement matters involving HHS/OCR, the FTC, and state attorneys general, and represent the company in audits, investigations, and complaint responses.

Posted Oct 2, 2026

DICK’S Sporting Goods – Director – Senior Corporate Counsel, Global Privacy – Product & Data Use

Responsibilities:

This role will serve as the primary privacy legal partner to product and marketing teams covering all banners (DICK’S, Foot Locker, GameChanger and subsidiaries). This role will advise on implementation of privacy controls/privacy by design, data use, emerging technology, personalization, media networks and HR technology. This role will enable innovation and while managing risk, with a focus on high-impact, revenue-driving initiatives.

Posted Oct 2, 2026

Syneos Health – Counsel I, Data Privacy

Responsibilities:

Provide practical, business-oriented legal advice on data privacy and data protection matters, including regional and state privacy laws and emerging legislative and regulatory developments that may impact the Company’s operations.
Support regional privacy compliance activities, including required notifications, filings and engagement with regulatory authorities, as needed.
Advise on privacy aspects relating to employment and recruitment and HR-related privacy notices.
Draft, review and maintain privacy notices, data processing agreements, data sharing agreements, HIPAA business associate agreements and other privacy documentation supporting the Company’s processing of personal data.
Collaborate with internal stakeholders to draft, review and negotiate privacy-related contract terms with customers, vendors and other third parties.
Advise on marketing, promotional and outreach activities.
Contribute to the development, implementation and maintenance of Company privacy policies, procedures, processes and training materials.
Support privacy operational activities, including data subject rights requests, complaints, privacy-by-design reviews, data mapping and mitigation strategies for key business initiatives.
Support privacy incident response activities, including investigation, assessment, required notifications, remediation support and coordination with the Company’s incident response team.
Participate in client and vendor meetings, customer audits and regulatory inspections for support related to data privacy.
Work collaboratively across the Office of the General Counsel, including regional legal teams, to build consensus, improve processes and drive legal projects to completion.
Support privacy reviews of new technologies and business initiatives, including artificial intelligence, digital health solutions, and other technologies involving personal data.

Posted Sept 28, 2026

Lennar – Director, Assistant General Counsel – Privacy

Responsibilities:

Lead Lennar’s data privacy function, with accountability for maintaining the privacy program, prioritizing the legal pipeline, and ensuring timely, high‑quality, and risk‑balanced delivery of legal services in support of business objectives.
Provide sophisticated, practical, and business‑forward privacy and commercial legal advice, including advice on data collection, use, sharing, retention, and cross‑border transfers, translating legal requirements and risk considerations into clear, actionable guidance that enables informed decision‑making and operational execution.
Oversee, negotiate, and resolve complex agreements, disputes, and matters, including drafting and negotiating data processing agreements, vendor and technology agreements, data‑sharing arrangements, and a broad range of other commercial agreements, including technology licensing and national supplier agreements, exercising sound judgment in managing legal risk, commercial considerations, and regulatory obligations.
Contribute to Lennar’s AI governance efforts and support broader privacy, compliance, and regulatory initiatives, partnering with senior legal leadership and cross‑functional stakeholders to implement required controls, respond to privacy and AI regulatory developments, and address compliance‑related issues.
Manage matter‑level financial responsibilities, including oversight of moderate outside counsel and settlement spend, budget tracking, and cost‑conscious decision‑making consistent with approved frameworks and escalation thresholds.
Develop and implement the privacy function’s foundational standards, processes, and playbooks, including privacy notices, data processing agreement templates, incident‑response and data‑subject‑request procedures, and negotiation guidance for vendor and technology matters, ensuring consistent application of policies, adherence to enterprise legal frameworks, and effective documentation and records integrity.
Mentor attorneys and legal professionals supporting privacy matters and help scale the team as the function grows, providing guidance on complex matters, reinforcing best practices, and supporting professional development and performance expectations.
Serve as a key legal partner to business leaders, collaborating across functions to anticipate legal risks, support initiatives, and deliver timely, practical legal solutions aligned with organizational priorities and values.

Posted Sept 25, 2026

Sanofi – Patient Privacy Officer & Counsel

Responsibilities:

As the business partner for several R&D and/or Medical departments, you will have end-to-end accountability to drive all privacy activities within your area, from driving privacy-by-Design of new projects to the effective monitoring and reporting of the risk management strategies to senior R&D leaders.
As a Subject Matter Expert of patient data, you will drive transversal privacy initiatives to foster responsible use of patient data, informed by patient perspectives, ethical and regulatory standards, and cross-functional alignment to protect patient rights and maintain trust while enabling innovation
You will monitor privacy risks in your area
You will partner with the local Privacy Officers and Legal teams in ensuring the Global Patients initiatives you support are compliant with local practices and regulations, and offering local resolutions,
You will co-author internal position papers with Legal, R&D and Government Affairs, representing Sanofi in industry advocacy efforts with Trade associations, Patient Associations Groups and Data Protection Regulators;
You will oversee patients rights requests coming from your respective areas, ensuring patients’ rights are upheld in line with regulatory requirements and Sanofi’s commitments to privacy;
You will drive the effective closure of action plans originating from regulatory inspections and internal audits

Posted Sept 23, 2026

Zelis – Associate General Counsel (Healthcare Privacy Counsel)

Responsibilities:

Work closely with Zelis’ information technology, product, and internal business teams to provide legal advice in support of Zelis’ strategic initiatives. This support will include counseling on a wide variety of technology transactions and initiatives involving data rights, data use, data privacy protection, information security matters, technology procurement, and consumer facing applications.
Support and advise Zelis’ business teams on efforts to develop and build out offshore operations, including review and negotiation of client contracts related to same
Maintain current knowledge of alterations in legislation and regulatory requirements including any data rights, data use, and security and privacy laws to proactively counsel business units and manage legal exposure
Support the Privacy and Information Security Teams on privacy and security incident response, including client and member notification requirements
Advise Marketing, Product, and Privacy teams on legal requirements related to compliant use of website tracking technologies
Support the Sales Legal Team on various data rights, AI, privacy and offshoring client contract review and negotiation
Draft and review agreements, contracts and other legal documents
Give accurate and timely counsel to internal clients
Research and evaluate different risk factors regarding business decisions and operations
Apply effective risk management techniques and offer proactive advice on possible legal issues

Posted Sept 23, 2026

Intuit – Corporate Counsel, Privacy Compliance

Responsibilities:

Manage Intuit’s privacy risk and impact assessments (PIA) program, including governance, workflows, and compliance with CCPA’s automated decision making regulations.
Own and evolve Intuit’s data subject rights (DSR) compliance program across the US and globally, ensuring processes meet requirements under CCPA/US state privacy laws, GDPR, and other applicable international frameworks.
Drive continuous improvement of privacy compliance tooling and processes, including automation opportunities for PIAs, risk assessments, and DSR fulfillment.
Advise on the application of privacy-by-design principles (data minimization, purpose limitation, transparency, and customer choice) to new and evolving technologies.
Act as a trusted privacy subject matter expert to cross-functional teams and provide actionable guidance and advice to enable smart risk.
Translate complex and changing privacy regulations into practical, scalable compliance frameworks, playbooks, and training for cross-functional partners.
Monitor the global regulatory landscape, including emerging AI-specific privacy and data protection laws, and translate developments into program updates.
Build strong working relationships across Legal, Product, Engineering, and Business teams, and drive alignment across competing points of view to reach practical outcomes.

Posted Sept 19, 2026

embecta – Senior Legal Counsel, Data Privacy

Responsibilities:

Lead the ongoing management and operation of embecta’s global privacy program and coordinate the activities of the Privacy Steering Committee in partnership with the Chief Ethics, Compliance and Privacy Officer.
Provide practical, risk-based legal guidance regarding the application of privacy, data protection, and cybersecurity requirements to the company’s existing and proposed products, services, technologies, systems, and business processes.
Work across functions to design, implement, maintain, and enhance privacy governance processes and operational controls, including processes relating to third-party privacy reviews, data subject access requests, data mapping and inventories, records of processing activities, data protection impact assessments, and privacy impact assessments.
Lead the development and implementation of privacy-by-design standards and practices consistent with applicable legal, regulatory, and industry requirements.
Promote awareness and understanding of privacy requirements through training, communications, guidance materials, and other educational initiatives.
Develop and maintain a strong understanding of the company’s operations, products, systems, technologies, data practices, customers, end users, vendors, and privacy risk environment.
Develop, implement, maintain, and update internal privacy policies, procedures, standards, and work instructions, as well as external privacy notices, website privacy statements, and cookie notices and banners.
Develop and manage an annual privacy risk assessment process and coordinate the tracking and remediation of identified risks.

Posted Sept 18, 2026

New York State Department of Health – Artificial Intelligence and Data Privacy Counsel (Associate Counsel)

Responsibilities:

Provides legal advice and review of the Department’s use of AI and emerging technologies, including compliance with applicable state and federal privacy laws and regulations.
Analyzes state and federal laws and regulations involving AI and emerging technologies.
Provides legal guidance to ensure AI and emerging technologies used within the Department comply with applicable privacy, intellectual property, and licensing requirements.
Provides legal guidance on data privacy legal issues.
Supervises and provides guidance to Senior Attorneys on legal matters.
Represents the Department of Health in discussions, agreements, and negotiations with the Executive Chamber, Division of Budget, Legislature, state and federal agencies, and external stakeholders.
Collaborates with Department program staff on legislative drafting and analysis and the development of statutes and regulations to advance Department priorities within applicable legal parameters.
Consults with colleagues within the Division of Legal Affairs on matters related to the incumbent’s areas of expertise and provides guidance and education to other attorneys, as necessary.

Posted Sept 18, 2026

Orion – Privacy & AI Governance Counsel

Responsibilities:

Serve as the primary enterprise advisor for privacy and AI governance, partnering with business leaders to integrate privacy and responsible AI principles into processes, products, services, and decision-making
Develop, maintain, and enhance privacy and AI governance frameworks, policies, standards, and controls aligned with organizational objectives and regulatory requirements
Translate legal and regulatory requirements into practical business guidance that enables innovation while mitigating privacy and AI-related risks
Monitor, assess, and communicate the impact of evolving privacy, security, and AI regulations on business operations
Investigate privacy and AI-related incidents, conduct root cause analyses, oversee remediation activities, and ensure timely resolution of identified risks
Lead enterprise privacy compliance activities, including privacy impact assessments, AI risk assessments, records of processing activities, data mapping, and regulatory reporting
Manage Data Subject Rights Request (DSRR) processes and support regulatory inquiries, audits, examinations, and investigations
Review and negotiate privacy and data protection provisions within contracts, vendor agreements, and third-party risk assessments
Collaborate with Legal, Information Security, Compliance, Product, Technology, and business teams to address privacy and AI governance requirements
Develop and deliver privacy, AI governance, and data protection training programs to increase organizational awareness and compliance
Establish, monitor, and report key privacy and AI governance metrics, risks, and compliance indicators to leadership
Support enterprise resilience and crisis management activities involving privacy, cybersecurity, and AI-related incidents
Maintain governance inventories for privacy and AI systems, including automated decision-making technologies and high-risk processing activities
Provide legal guidance regarding data minimization, purpose limitation, transparency, profiling, automated decision-making, and emerging AI regulations
Drive continuous improvement initiatives that enhance privacy operations, governance effectiveness, and regulatory readiness

Posted Sept 12, 2026

Scout Motors, Inc. – Associate General Counsel, Privacy, Cybersecurity & AI Governance

Responsibilities:

Lead the design, implementation and management of a comprehensive global data privacy program, including governance structures, policies, and procedures.
Advise on compliance with applicable laws and regulations (e.g., GDPR, CCPA/CPRA, U.S. state privacy laws, global data transfer regimes).
Advise on and partner with the Commercial and IT teams to build a best-in-class consumer privacy regime for Scout Motors’ direct-to-consumer business.
Advise on data protection terms in agreements including license, vendor, SaaS, technology, master services, confidentiality and other agreements.
Draft privacy policies, notices, related disclosures, disclaimers, FAQs and communications to support and enable internal business team compliance.
Act as the primary legal owner of data privacy obligations arising from connected vehicle operations, including telematics, over-the-air updates, and backend data processing.
Assist security and R&D teams in establishing mature privacy-by-design and privacy-by-default frameworks integrated into product development lifecycle.
Support incident response for privacy-related matters, including regulatory engagement.

Posted Sept 11, 2026

UnitedHealth Group – Staff Counsel, Privacy

Responsibilities:

Serve as a trusted privacy advisor to UnitedHealthcare, with a primary focus on HIPAA and state privacy law compliance
Advise marketing and product teams by reviewing initiatives, materials, and workflows for privacy and data protection considerations
Own and manage updates to UHC health plan Notices of Privacy Practices, Online Services Privacy Policy, and related notices, including coordination and rollout to impacted business areas
Operationalize health plan specific privacy programs, including training, communications, policies, and procedures
Provide privacy guidance in support of business associate agreements and other contracting matters, in collaboration with contracting and procurement teams
Advise on regulatory change management and support the implementation of new and updated federal and state privacy requirements
Advise on and respond to privacy related requests for proposals, customer and regulator audits, and compliance reviews
Partner closely with cross functional stakeholders across UnitedHealthcare’s lines of business to balance legal risk and business priorities
Operate effectively in a fast paced, high growth environment while exercising sound judgment

Posted Sept 8, 2026

Lennar – Director, Assistant General Counsel – Privacy

Responsibilities:

Lead Lennar’s data privacy function, with accountability for maintaining the privacy program, prioritizing the legal pipeline, and ensuring timely, high‑quality, and risk‑balanced delivery of legal services in support of business objectives.
Provide sophisticated, practical, and business‑forward privacy and commercial legal advice, including advice on data collection, use, sharing, retention, and cross‑border transfers, translating legal requirements and risk considerations into clear, actionable guidance that enables informed decision‑making and operational execution.
Oversee, negotiate, and resolve complex agreements, disputes, and matters, including drafting and negotiating data processing agreements, vendor and technology agreements, data‑sharing arrangements, and a broad range of other commercial agreements, including technology licensing and national supplier agreements, exercising sound judgment in managing legal risk, commercial considerations, and regulatory obligations.
Contribute to Lennar’s AI governance efforts and support broader privacy, compliance, and regulatory initiatives, partnering with senior legal leadership and cross‑functional stakeholders to implement required controls, respond to privacy and AI regulatory developments, and address compliance‑related issues.
Manage matter‑level financial responsibilities, including oversight of moderate outside counsel and settlement spend, budget tracking, and cost‑conscious decision‑making consistent with approved frameworks and escalation thresholds.
Develop and implement the privacy function’s foundational standards, processes, and playbooks, including privacy notices, data processing agreement templates, incident‑response and data‑subject‑request procedures, and negotiation guidance for vendor and technology matters, ensuring consistent application of policies, adherence to enterprise legal frameworks, and effective documentation and records integrity.

Posted Sept 5, 2026

Roblox – Privacy & Security Counsel

Responsibilities:

SME on Law: Provide subject-matter expertise and guidance on the evolving global security and privacy legal landscape, including legislation, regulations, enforcement actions, and best practices, translating analysis into clear, concise, and actionable guidance to both legal and security teams.
Incident Response Engagement: Engage with the Detection and Response and Global Security teams during incidents. Provide legal guidance throughout the incident, including during verification, triage, containment, remediation, post-mortem, table-top exercises, counseling internal stakeholders throughout the incident lifecycle, reporting to regulators, and notifying customers to meet our global obligations.
Security Compliance Support: Own and deliver complex, cross-functional cybersecurity legal initiatives end-to-end, including AI and agentic-AI governance, new regulatory regimes, major incident response improvements, with clear milestones, stakeholder alignment, and measurable outcomes. Continuously improve incident response policies and playbooks that meet the standards of applicable global data privacy and security laws.
Security Team Support: Embed within security pods as a trusted partner and go-to legal resource for regular expertise, insights, guidance, and support to different security teams, including Application Security, GRC, Privacy Engineering, Global Security, and Infrastructure/Platform teams, developing a working understanding of Roblox’s architecture, data flows, and operational constraints.
Cross-Functional Legal Advice: Provide subject matter expertise in privacy and security and support to cross-functional legal advocacy teams, including corporate, employment, compliance, policy, regulatory, product, privacy, and commercial.

Posted Sept 4, 2026

Cardinal Health – Privacy & Cybersecurity, Sr. Counsel

Responsibilities:

Serve as a functional expert working closely with and advising business leaders, commercial counsel, and other colleagues on privacy issues, including data protection, data retention, data usage, data security and data breaches
Review and negotiation of data privacy agreements, data processing agreements, business associate agreements and other similar privacy-related provisions
Advise on incident response and data breach reporting processes in coordination with the VP of Privacy
Collaborate with IT Security teams to ensure alignment between IT security and privacy compliance programs
Provide guidance, direction, and practical translation of privacy requirements to cross-functional teams on complex projects
Assist with the management of legislative and regulatory inquiries, investigations or administrative actions related to privacy and data security
Review policies and procedures to ensure compliance with applicable data privacy laws and regulations
Advise on the design and provision of the privacy training program
Remain up to date on legislative developments in Privacy at the state, federal and international level that may affect Cardinal Health

Posted Sept 4, 2026

lululemon – Privacy Counsel

Responsibilities:

Partner with company stakeholders to gather information and approvals necessary for privacy compliance matters.
Work with all members of the legal team across global office locations, including attorney and non-attorney personnel.
Serve as the primary point of contact supporting our APAC and China Legal partners.
Monitor for regulatory change, perform analysis of changes, and oversee business implementation of changes in a timely manner.
Conduct research and contribute to emerging privacy compliance projects related to new product launches.
Collaborate with the global legal team to develop and implement best practices and policies.
Provide direction to teams during incidents and engagement of outside counsel.
The Privacy Counsel works closely with the rest of the Privacy team on compliance execution, matter and regulatory tracking, program maturity and reporting to leadership.

Posted Sept 2, 2026

Empower – Counsel – Data Protection, Privacy & Cyber Security

Responsibilities:

Research, interpret, and provide legal guidance regarding federal, state, and evolving global privacy, data protection, cybersecurity, consumer protection, and related laws and regulations, including GLBA, state comprehensive privacy laws, FCRA, TCPA, CAN-SPAM, and other applicable requirements.
Advise business partners on privacy and data protection requirements affecting Empower’s products, services, operations, and customer interactions.
Support the development, implementation, and maintenance of privacy policies, notices, procedures, and other compliance frameworks.
Provide legal support regarding the collection, use, sharing, retention, and protection of personal information.
Assist with legal issues involving cybersecurity, data incidents, information security, online privacy, and evolving technology and data practices.
Review and draft privacy and data protection provisions in client, vendor, and other commercial agreements, and support contract negotiations and RFPs.
Assist with records retention and information governance matters, including interpreting legal and regulatory retention requirements.
Support regulatory examinations, inquiries, and other matters involving privacy, cybersecurity, data protection, and related issues.
Monitor emerging privacy, cybersecurity, technology, and consumer protection developments and help translate new legal requirements into practical guidance for the business.
Research and provide legal guidance on evolving laws, regulations, regulatory guidance, and industry standards governing artificial intelligence and other emerging technologies, including requirements relating to privacy, data use, transparency, automated decision-making, governance, and consumer protection.
Partner with Legal, Privacy, Compliance, Risk, Technology, Cybersecurity, Product, and other stakeholders on the responsible development, procurement, and use of AI-enabled tools and applications, including helping assess legal and regulatory considerations associated with new AI use cases.

Posted Sept 1, 2026

* * *

Looking for an older job listing? In an effort to keep this page as up-to-date as possible, we have moved Job Listings older than the date above to our Condensed Job Listings page. We hope this comprehensive list will allow you to see the many different career opportunities that exist in Privacy and Data Security Law.

Privacy Law Job Listings

PRIVACY LAW JOB LISTINGS