Counsel Global Privacy Transactions And Third Party Risk

Profile

Counsel, Global Privacy Transactions, and Third Party Risk

The candidate will manage privacy transactions for QRG globally, including leading the review of, and negotiating data privacy agreements for, complex and high-risk transactions to support QRG business and ensure transactions are compliant with data privacy obligations. Regular review and updating of QRG privacy templates to reflect privacy regulations and industry best practices. Conduct complex data protection impact assessments. (DPIAs) for high-risk uses of personal data by third parties, and refresh existing DPIAs. Provide regular support to key stakeholders including leaders, information technology, cybersecurity, people team, marketing, and procurement; provide support for other privacy-team/information governance activities and act as subject matter expert for other QRG legal team members. Manage privacy compliance obligations of 3d parties, including fulfillment of data subject requests. Lead other activities relating to managing third-party privacy risk, including aligning to data subject rights; partner with stakeholders (including cybersecurity) to assess privacy risks from 3d parties in a structured, scalable, sustainable process. Manage direct reports and the use of outside counsel. Research and monitor changes in privacy law and maintain current awareness of developments in privacy best practices and benchmarking practices. Assist in data breach responses related to 3d parties and other projects in support of global data privacy and information governance and provide support for other duties as assigned. Should have JD Degree. Should have Bachelor’s degree in a relevant field. Should have 7-9 years of general working experience in privacy. Should have 5 years of experience in privacy in a customer-facing retail environment managing privacy compliance and privacy risk. Should have 9-11 years of experience preferred. Should have knowledge of privacy laws, including CCPA/CPRA, United States state privacy laws, GDPR, UK Data Protection Act, ePrivacy, HIPAA, Japan APPI, and China PIPL, and the ability to implement requirements (including enabling data subject rights) effectively in assessing third parties and negotiating privacy agreements. Should have prior experience maintaining/supporting a privacy program within a business. Prior experience in managing or assisting with data breach responses. Maintain continuing awareness of changes in privacy laws, court cases, and developing trends. Familiarity with software, cloud solutions, and other technology that processes information, including personal information; ability to prioritize, manage multiple projects, and meet deadlines. Engage with leaders and stakeholders across business groups and QRG locations to obtain a thorough understanding of QRG's business processes, applications, policies, and other practices as they relate to privacy. Should have demonstrated the ability to communicate with credibility and enforce QRG's data privacy policies internally and externally with the goal of informing, educating, and advocating for good privacy practices. Should have the ability to lead others; excellent written and verbal communication skills, including in English; strong computer skills with customary business programs (e.g., Word, Outlook, Excel); strong interpersonal skills.

Company info

QVC, Inc
1200 Wilson Drive at Studio Park
West Chester
Pennsylvania
United States 19380
Website : http://www.qvc.com