Director, Privacy & Data Protection
Core
Director of Privacy & Data Protection providing hands-on legal support for UMG's global privacy program, managing contracts, data subject rights, and cybersecurity incidents.
Role type
Senior in-house privacy attorney (Director level)
Builds
Global privacy compliance framework, commercial agreements, and incident response protocols for a multinational music and entertainment company.
Domain
Music & Entertainment / Global Data Privacy Law
Required skills
Privacy law fundamentals, contract drafting and negotiation, data subject rights management, cybersecurity incident response, regulatory compliance analysis, legal research, analytical reasoning, business advisory, stakeholder collaboration, process improvement
Preferred skills
CIPP/US or CIPP/E certification, experience in entertainment or digital media industries, knowledge of emerging technologies and data uses
Technologies
GDPR, CCPA/CPRA, data processing agreements, privacy impact assessments, online advertising and tracking technologies
Responsibilities
Draft and negotiate data protection terms in commercial agreements; handle data subject and consumer privacy rights requests; support cybersecurity and data security incident response; advise on compliance with U.S. and international privacy laws; support privacy reviews of new business initiatives and technologies; maintain and improve privacy policies and procedures; provide privacy guidance and training to internal teams.
Seniority
Director, hands-on IC with strategic oversight
