Legal Counsel, Privacy and Data Protection

Overview

In this role you will provide expert, business-focused legal guidance on EU/EEA privacy and data protection across Nielsen’s products and operations. You will independently manage privacy workstreams and support the European privacy program, serving as a trusted advisor to sales and business teams. You will collaborate with Product, Engineering, Data Science, and other functions to enable compliant product launches and partnerships. This position offers meaningful impact in shaping privacy practice while enabling business growth, in a global, collaborative environment.

Pay / Benefits

• competitive salary
• benefits package
• development opportunities
• open corporate culture
• opportunity for independent work
• friendly team environment

Responsibilities

• Provide day-to-day EU/EEA GDPR and privacy guidance to product, commercial, and operations teams
• Translate evolving privacy law into clear guidance, contract language, policies, and processes
• Draft, review, and negotiate data processing agreements and privacy exhibits on buy-side and sell-side
• Support local sales and business teams on privacy aspects of customer agreements and proposals
• Conduct PIAs/DPIAs, transfer impact assessments, legitimate interest assessments, and other privacy risk assessments
• Perform privacy due diligence on third parties and data flows, identifying gaps and remediation
• Advise on advertising tech, cookies, identity, consent management, data monetization, and related practices
• Collaborate with cross-functional stakeholders to assess data collection and product changes for compliance
• Engage with data protection authorities as needed and support regulatory inquiries or audits
• Contribute to privacy program materials, training, data inventories, and records of processing
• Monitor EU/EEA privacy developments and communicate impact and recommendations to stakeholders

Key requirements

• Extensive in-house privacy, data protection, or related legal experience
• Law degree or equivalent; UK qualification/admission required
• Deep practical knowledge of GDPR and European privacy laws
• Experience with DPIAs/PIAs, transfer impact assessments, and privacy risk assessments
• Experience drafting and negotiating DPAs and data protection exhibits
• Experience advising cross-functional teams on complex privacy issues
• Experience engaging with supervisory authorities or regulators is preferred
• Strong legal research, writing, negotiation, and analytical skills
• Excellent written and verbal English; additional European language a plus

• clear, actionable communication
• negotiation and consensus-building
• analytical thinking and problem-solving
• DPIAs/PIAs
• data processing agreements (DPAs)
• data sharing and data use agreements

…