Senior Counsel, Privacy

Michael Kors is always interested in hearing from talented, globally-minded individuals with a passion for fashion.

If you enjoy working in a creative, fast-paced environment, then we would love to hear from you!

—

Who you are:

You are a highly skilled and proactive legal professional with deep expertise in privacy and data protection. You thrive in a dynamic, collaborative environment and excel at building strong relationships across teams. You possess a strong understanding of global privacy laws and regulations, paired with the ability to provide practical, business-oriented solutions. Your attention to detail, analytical mindset, and ability to manage multiple priorities make you a trusted advisor to stakeholders. You’re passionate about safeguarding data while enabling innovation and growth for a global organization.

As a member of the Capri legal team, you will be responsible for providing guidance and advice on privacy and data protection matters to Capri and it’s three iconic brands, ensuring compliance with applicable laws and regulations and mitigating privacy-related risks for the organization.  You will work closely with cross-functional teams including digital marketing, data analytics, information technology and security, e-commerce and retail operations to support privacy initiatives across the group.

What You’ll Do:

• Advise the organization on compliance with applicable privacy and data protection laws and regulations in the U.S. and Canada, including U.S. state laws, such as CPRA, and PIPEDA, ensuring policies and practices align with applicable legal requirements and partner with regional counterparts on privacy and data protection matters outside North America, including for example, GDPR and PIPL.
• Support with the ongoing development and implementation of the company’s privacy strategy and program, including but not limited to:
  • Monitor emerging privacy regulations and enforcement trends and help shape the company’s compliance strategy in response to changes in the regulatory landscape
  • Conduct privacy impact assessments (PIAs), assist in data mapping exercises to evaluate and mitigate privacy risks and update records of processing activities
  • Assist in managing responses to data subject requests (DSRs), including requests for access, correction, and deletion of personal data, in accordance with privacy laws
  • Assist with internal investigations and responses to data breaches or privacy incidents, including breach notifications where required under applicable laws
  • Draft and review data protection agreements in accordance with new rules on data minimization, cross-border data transfers and data localization
  • Develop or enhance privacy related policies and notices (including customer and employee notices, data breach response and retention policies) working in collaboration with the company’s employment counsel for employee data
  • Create and provide training to relevant business teams in line with changing regulatory guidance and best practices
  • Manage the inbox of the Privacy Office, including responding to questions and complaints received
• Provide legal counsel to various business units on data privacy issues related to new technologies or use cases of personal data, including digital marketing activities and data analytics. Identify and assess compliance risks and opportunities, then work collaboratively with all stakeholders to develop and implement appropriate mitigation strategies to find ways to address issues in practical ways.
• Draft, review, and negotiate privacy-related clauses in commercial contracts, including technology, digital marketing, tracking technologies, data analytics and data processing agreements.
• Review incoming requests for artificial intelligence use and any overlap with privacy issues.

You’ll Need to Have:

• Juris Doctorate or educational equivalent
• Admission and member in good standing of the bar of New York
• 3-7 years of experience practicing law at a law firm, in-house legal position or both with focus on privacy, data protection and cybersecurity
• At least 3 years of experience advising companies with respect to data privacy compliance, with extensive knowledge of the global privacy landscape
• Proven ability to be pro-active and able to work independently to identify privacy risks, analyze problems and provide viable solutions
• Excellent verbal, written, interpersonal, organizational and negotiation skills
• Ability to work under pressure, handle deadlines, prioritize and manage multiple tasks in a high- performance environment
• Flexibility to work in office when needed (hybrid schedule)
• One or more certifications in data privacy is a ni