Senior Legal Counsel, Privacy and Data Protection

Overview

As Senior Legal Counsel for Privacy and Data Protection, you will deliver sophisticated, business-focused legal guidance on EU/EEA privacy across Nielsen’s products, partnerships, and operations. You’ll lead complex privacy workstreams, support the European privacy program, and advise cross-functional teams to balance risk and commercial needs. You will work autonomously on key projects and help translate regulatory developments into actionable guidance. This role offers impact across a global, data-driven organization with a strong privacy program and a collaborative culture.

Pay / Benefits

• competitive salary and benefits
• open corporate culture
• development opportunities
• ownership and personal development
• flexible/remote work options
• informal atmosphere

Responsibilities

• Provide day-to-day EU/EEA GDPR and related data protection advice to product, sales, marketing, procurement, and operations teams
• Translate regulatory developments into clear guidance, contract language, and policies for stakeholders
• Draft, review, and negotiate data protection agreements, data sharing arrangements, and privacy provisions in commercial contracts
• Conduct privacy risk assessments (PIAs/DPIAs, transfer assessments, legitimate interest assessments) and oversee privacy due diligence of third parties
• Support privacy incidents, data subject rights requests, audits, and regulatory inquiries in coordination with Stakeholders and outside counsel
• Assist with communications with data protection authorities and monitor EU/EEA privacy developments to advise on impact and actions
• Contribute to and improve privacy program materials, records of processing, data inventories, and training materials
• Partner with cross-functional teams to assess data collection, use, retention, and disclosure for product launches and operational changes

Key requirements

• Extensive in-house experience in privacy, data protection, or related legal work with a track record of independent work
• Law degree and UK qualification
• Strong GDPR knowledge and practical application across multiple jurisdictions
• Experience drafting and negotiating DPAs and data protection exhibits, including both buy-side and sell-side contexts
• Experience advising cross-functional business teams on complex privacy issues and translating legal requirements into practical solutions
• Experience engaging with supervisory authorities or regulators is preferred
• Strong legal writing, negotiation, analytical, and issue-spotting skills
• Fluent English; additional European language is a plus

• Clear, actionable communication
• Stakeholder management and consensus-building
• Analytical thinking and risk assessment
• GDPR knowledge and national privacy laws
• DPIAs/PIAs, transfer impact assessments, legitimate interest assessments
• Data processing agreements and privacy-related contract terms

…