Senior Legal Counsel, Privacy and Data Protection

Overview

In this role you will provide senior legal guidance on EU/EEA privacy and data protection across Nielsen’s products and operations. You will independently manage complex privacy workstreams and support the European privacy program while collaborating with product, engineering, data science, and commercial teams. You’ll draft and negotiate data protection terms, translate regulatory developments into practical guidance, and help manage privacy risks at scale. This position offers a chance to shape Nielsen’s privacy program within a global, cross-functional environment.

Pay / Benefits

• competitive salary and benefits
• open corporate culture
• independence in a friendly team
• development opportunities
• social responsibility and values
• informal atmosphere in a dynamic media company

Responsibilities

• Provide day-to-day EU/EEA GDPR and ePrivacy guidance across products, contracts, and operations
• Translate regulatory developments into actionable guidance, policies, and notices for stakeholders
• Draft, review, and negotiate data protection agreements and related privacy terms in commercial contracts
• Support local sales and business teams on privacy aspects of customer agreements and proposals
• Oversee privacy risk assessments (PIAs/PIAs, DPIAs, transfer impact assessments) for products and initiatives
• Conduct privacy due diligence on third parties and oversee remediation of identified gaps
• Advise on advertising tech, audience measurement, analytics, cookies, identity, and data practices in media
• Collaborate with cross-functional teams to assess data collection, use, retention, and deletion for product launches
• Coordinate with data protection authorities during regulatory inquiries, audits, and incidents
• Contribute to improving privacy program materials, data inventories, and compliance reporting
• Monitor EU/EEA privacy developments and communicate impact and recommendations to stakeholders

Key requirements

• 5–10 years of privacy or related legal experience with a track record of independent work
• Law degree and UK qualification/admission required
• Deep knowledge of GDPR and national privacy laws in at least one European jurisdiction
• Experience conducting DPIAs/PIAs, transfer risk assessments, and privacy risk assessments
• Experience drafting and negotiating DPAs, data protection exhibits, and data sharing terms
• Experience advising business teams on complex privacy issues and practical solutions
• Experience engaging with supervisory authorities or regulators is preferred
• Strong legal research, writing, negotiation, and analytical skills
• Excellent English communication skills; additional European language is a plus
• CIPP/E preferred; CIPM/CIPT or equivalent is a plus
• Adtech/martech, media measurement, or data licensing experience preferred
• Knowledge of U.S. and APAC privacy frameworks is advantageous

• Strong communication and ability to explain complex issues clearly
• Collaborative, cross-functional partnership
• Judgment and stakeholder consensus-building
• DPIAs/PIAs, data transfer impact assessments
• Data processing agreements and DPAs
• Privacy notices, data inventories, and records of processing

…