Company: Tapestry (Coach, kate spade new york, Stuart Weitzman)
Position: Manager, Counsel, Commercial Contracts
Location: New York City (Hudson Yards)
Description:
Manager, Privacy Counsel
As a member of the Law Department, you will provide ongoing dedicated legal and data management support to global privacy and will report to the Sr. Director, Global Privacy Counsel. This position requires a strong understanding of legal and regulatory developments influencing data privacy and knowledge of data management technology. You will be based in our New York corporate office in Hudson Yards.
The successful individual will leverage their proficiency in law to…
- Provide day-to-day data protection and related compliance advice and counsel to internal clients (e.g., Marketing, Data Analytics, Information Security, Procurement, Retail Operations, etc.)
- Implement Global Privacy Program, including but not limited to:
- Manage data subject rights requests
- Draft and review data protection contractual clauses in accordance with new rules on data minimization, cross-border data transfers and data localization;
- Conduct privacy risks assessments in cooperation with data owners and stewards
- Update records of processing activities
- Report compliance metrics to Internal Audit
- Leverage new technology solutions to manage data across organization
- Draft or enhance privacy program-related standards, policies and playbooks, and provide training in line with changing regulatory guidance and best practices
- Manage the inbox of the Global Privacy Office, including – data subject rights requests and opt outs from marketing emails and text messages
- Review, analyze and draft agreements related to data management (access, use and sharing) and data retention
- Review incoming requests for artificial intelligence use and assist in maturing AI governance framework and policies
- Conduct complex legal research and track global privacy legislation, evolving regulations, and enforcement trends
- Collaborate with cross-functional teams to integrate legal considerations into new products and processes
- Go beyond risk assessments to find ways to address issues in practical ways.
Qualifications:
The accomplished individual will possess…
- JD or educational equivalent (required)
- Any of CIPP/E/US/C/A, CIPM, or CIPT certifications preferred
- At least 3 years of experience as a privacy manager, privacy counsel or associate with experience in an in-house environment (retail & e-commerce preferred)
- Experience either in-house, law firm or both with significant experience in relation to European and the US data privacy and personal data protection
- Good understanding of and familiarity with current legal and regulatory requirements relating to data privacy, data governance (classification and retention) and related legal and regulatory environments
- Document (standard, policy or playbook) drafting skills
- Strong interest/knowledge in new and emerging data management-technology solutions preferred
- Strong analytical, problem-solving and legal research skills
- Proven ability to independently identify privacy risks, analyze problems and provide viable solutions. Excellent verbal, written, interpersonal, organizational and negotiation skills
- Ability to communicate and interact effectively with all levels of personnel and management
- Ability to work under pressure, handle deadlines, and manage multiple tasks in a high- performance environment
- Ability to follow up on assignments in a timely manner, exercise good business judgment and work accurately under pressure
- Excellent interpersonal skills and ability to build consensus across a global matrix organization.
An outstanding professional will have…
- Technical savvy to use technology to mitigate privacy risks
- Willingness and curiosity to learn and implement new data privacy laws across the globe including North America, the EU & the UK, and the APAC regions (China’s Personal Information Protection Act)
- Self-starter to proactively collaborate with key business owners (Global Marketing, Data Analytics, IT and Information Security, Customer Care, and Clienteling) on data uses and privacy risks management