Senior Counsel, Privacy & Data Protection

Our Purpose

Mastercard powers economies and empowers people in 200+ countries and territories worldwide. Together with our customers, we’re helping build a sustainable economy where everyone can prosper. We support a wide range of digital payments choices, making transactions secure, simple, smart and accessible. Our technology and innovation, partnerships and networks combine to deliver a unique set of products and services that help people, businesses and governments realize their greatest potential.

Title and Summary

Senior Counsel, Privacy & Data Protection

Overview:
Mastercard is committed to balancing innovation while protecting individual privacy and has embraced privacy and data protection as core to the successful execution of its business strategy. As part of that commitment Mastercard has established a world-class privacy program and is currently adding talent to its global team.
The Senior Counsel, Privacy & Data Protection will support both the strategy and the daily operations of the Privacy and Data Protection Team with a global remit, while enabling business teams through Mastercard’s Privacy by Design approach and reinforcing Mastercard’s world leadership in responsible, data-driven innovation.
The position will report to the Senior Managing Counsel, Privacy & Data Protection, will be a member of the Global Privacy & Data Protection team as well as a member of the Law Department, and will operate out of our Purchase, Waterloo, London office - open to other locations.

Role:
The Senior Counsel, Privacy & Data Protection will support the Privacy and Data Protection team to ensure privacy compliance is built into Mastercard data-driven products and services offerings in the network and digital payments space, with a specific emphasis on the company’s Authentication and e-commerce solutions (e.g., ID&V technologies, device passkeys, biometrics, and tokenization). The selected candidate must have the ability to understand complex data laws (including but not limited to privacy, data protection and AI laws) and the operational and technical requirements behind compliance with these laws. The Senior Counsel will assist in developing creative solutions while ensuring compliance with data laws globally. Activities include:
• Support Mastercard’s operationalization of compliance with privacy and data related laws – including, for example, CCPA/CPRA, GLBA, PIPEDA, GDPR, GDPL and other current and forthcoming privacy laws around the globe.
• Identify legal, business, and technical infrastructure requirements and controls to enable privacy compliance adopting the Privacy by Design process; work with legal, business, technical teams to assist implementation.
• Monitor for emerging regulatory developments and translate legal terms into business requirements.
• Define processes, workflows, and training material for support service personnel to facilitate legal compliance with applicable privacy and data protection laws and regulations.
• Assist the team to record data protection impact assessments where required, and to identify and implement privacy controls and safeguards to mitigate risks.
• Draft privacy notices and review consumer-facing material, including marketing and communications campaigns, for compliance with applicable privacy and data protection requirements.
• Maintain records of processing for all personal data processing activities as required under applicable data protection laws, regulations, and standards.
• Engage with the organization to assist in training employees on privacy and data protection requirements, handle privacy-related queries and raise employee awareness about privacy and data protection developments.

All About You:
A little about our ideal candidate:
• Law degree required.
• Admitted as an attorney in the relevant office jurisdiction
• Any additional qualifications (e.g., Master of Laws degree) considered an asset.
• Strong experience in privacy and data protection law. IAPP certification an asset but not sufficient without relevant experience.
• Oral and written fluency, including legal drafting and presentation skills.
• Proficiency in providing privacy subject matter expertise to fast-moving product business and legal teams throughout the product lifecycle (ideation, design, development, deployment and enhancements)
• Expertise in and track record of dealing with global privacy and data protection laws.
• Pro-active approach to problem-solving with a demonstrated track record of successfully translating legal requirements into practical, actionable advice.
• Expertise in applying privacy and data protection analysis on emerging technologies, including various biometric modalities, encryption techniques, artific