Sr. Counsel, Privacy

Company Description

NBCUniversal is one of the world's leading media and entertainment companies. We create world-class content, which we distribute across our portfolio of film, television, and streaming, and bring to life through our theme parks and consumer experiences. We own and operate leading entertainment and news brands, including NBC, NBC News, MSNBC, CNBC, NBC Sports, Telemundo, NBC Local Stations, Bravo, USA Network, and Peacock, our premium ad-supported streaming service. We produce and distribute premier filmed entertainment and programming through Universal Filmed Entertainment Group and Universal Studio Group, and have world-renowned theme parks and attractions through Universal Destinations & Experiences. NBCUniversal is a subsidiary of Comcast Corporation.

Our impact is rooted in improving the communities where our employees, customers, and audiences live and work. We have a rich tradition of giving back and ensuring our employees have the opportunity to serve their communities. We champion an inclusive culture and strive to attract and develop a talented workforce to create and deliver a wide range of content reflecting our world.

Comcast NBCUniversal has announced its intent to create a new publicly traded company ('Versant') comprised of most of NBCUniversal's cable television networks, including USA Network, CNBC, MSNBC, Oxygen, E!, SYFY and Golf Channel along with complementary digital assets Fandango, Rotten Tomatoes, GolfNow, GolfPass, and SportsEngine. The well-capitalized company will have significant scale as a pure-play set of assets anchored by leading news, sports and entertainment content. The spin-off is expected to be completed during 2025.

Job Description

As a key member of the Legal Privacy team, this role will enable our business to develop and execute innovative data-driven strategies in accordance with data privacy and related laws. The successful candidate will effectively partner cross-functionally to provide expert and pragmatic counseling to senior leaders and provide leadership and subject matter expertise to drive the implementation of Versant's data privacy and information security programs. This role offers the unique opportunity to build the privacy and data security operations of a newly formed media company. 

Job Description

• Partner closely with cross-functional teams to assess potential privacy and security risks and regulatory requirements for Versant’s products, services and technologies.
• Counsel business and technology teams on privacy issues regarding the development of products, platforms, services and other initiatives involving the collection and use of personal information, with a focus on consumer data and related advertising and marketing use cases.
• Assist in the counseling of digital properties, including consumer facing websites, mobile applications, and related internal databases with respect to privacy issues.
• Provide legal oversight and guidance, as needed, related to privacy products including the Consent Management Platform and Individual Rights Request portal and associated processes, as well as other privacy tools, including marketing consents, children’s data and viewing protections, and data dormancy and retention processes.
• Stay current on evolving global data protection and privacy laws, developments, and frameworks as well as other laws with an impact on the processing of personal information (especially emerging Al regulations) and provide practical and strategic advice to the business.
• Review and assist in developing privacy controls with respect to privacy impact assessments, including privacy -related notices, policies, guidelines, standards and processes.
• Work closely with business, technology, information security, customer experience to establish relationships and deliver consistent, practical legal guidance and support.
• Help develop and scale our privacy program.
• Draft and help maintain domestic and international privacy and data policies, standards, and processes.
• Review and maintain records of processing activities; conduct various privacy assessments (e.g., PIAs, LIAS, DPIAS).
• Review/draft a variety of privacy agreements, including data processing agreements.
• Develop and provide privacy training to other legal and business partners.
• Monitor, analyze, and provide legal advice on emerging cybersecurity laws and industry frameworks.
• Support incident management and collaborate closely with security function.
• Review and support the negotiation of contractual documents related to cybersecurity.
• Manage regulatory reporting and registration requirements under new cybersecurity laws.
• Conduct risk assessments and provide guidance on mitigating cybersecurity risks.
• Manage outside counsel advice.