Senior Legal Counsel, Privacy and Data Protection
- Compensation
- Not disclosed
- Location
- London, England, gb
- Work setup
- Remote
- Seniority
- Senior
- Employment
- Contract
- Experience
- Not specified
- Category
- Legal
- Posted
Skills
Nice to have
- CIPP/E certification is greatly preferred, but it is not a hard requirement. CIPM, CIPT, or an equivalent privacy credential is also a plus.
- Adtech, martech, media measurement, audience analytics, data licensing, or digital advertising experience is strongly preferred.
- Knowledge of U.S. privacy and data protection requirements, including U.S. state privacy laws and the CCPA/CPRA, is an advantage.
- Knowledge of APAC privacy and data protection regulations—particularly India’s Digital Personal Data Protection framework, Australia’s Privacy Act and Australian Privacy Principles, or South Korea’s P
- Familiarity with international data transfers, standard contractual clauses, cross-border data sharing, consent and preference management, privacy management tools, data mapping, and records of proces
Full description
This position can be done remotely within the UK. A central-London office is also available for hybrid work if preferred. You will be part of a friendly, international team. Job Summary
The Senior Legal Counsel, Privacy and Data Protection will provide sophisticated, practical, and business-oriented legal advice on EU/EEA privacy and data protection matters across Nielsen’s products, services, commercial relationships, and internal operations. This role will independently manage complex privacy workstreams, support Nielsen’s European privacy program, and serve as a trusted advisor to local sales and business teams. The role will work closely with Product, Engineering, Data Science, Information Security, Procurement, Sales, Marketing, and Legal colleagues across jurisdictions.
- Provide senior legal guidance on EU/EEA privacy compliance, data governance, and risk mitigation for business operations, products, partnerships, and commercial transactions.
- Apply in-depth knowledge and experience to solve complex privacy and commercial legal problems, using best practices and a practical understanding of Nielsen’s business.
- Work independently with minimal guidance, lead smaller projects and complex workstreams, and act as a resource for colleagues with less experience.
- Draft, review and negotiate complex data protection exhibits on both the buy-side and sell-side.
- Build consensus among stakeholders by explaining complex, difficult, or sensitive privacy and data protection issues in clear, actionable terms.
Responsibilities
- Provide day-to-day legal advice on the EU/EEA General Data Protection Regulation (GDPR), applicable national implementing laws, European Data Protection Board (EDPB) guidance, supervisory-authority decisions, ePrivacy requirements, marketing and consumer protection rules, and other relevant European data protection and digital regulations.
- Maintain deep practical knowledge of EU/EEA privacy and data protection requirements and translate legal developments into clear, actionable guidance, contract language, policies, notices, processes, and implementation requirements for local and global stakeholders.
- Draft, review, and negotiate data processing agreements, data protection exhibits, data sharing and data use agreements, data transfer arrangements, and related privacy provisions in commercial contracts, representing Nielsen on both the buy-side and sell-side.
- Support local sales and business teams on privacy aspects of customer agreements, proposals, product offerings, data services, partnerships, and other commercial opportunities, providing timely and commercially practical advice.
- Conduct and oversee privacy impact assessments (PIAs/DPIAs), transfer impact assessments, legitimate interest assessments, and other privacy risk assessments for products, features, data uses, partnerships, and operational initiatives.