Privacy & Product Counsel
Fanatics, Inc.
full-time
Posted on:
Location Type: Hybrid
Location: New York City • California • New York • United States
Visit company websiteExplore more
Salary
💰 $175,000 - $225,000 per year
About the role
- Advise on global privacy and data protection laws and regulations, including U.S. state privacy laws (e.g., CCPA/CPRA), GDPR, and other international frameworks.
- Provide practical, business-focused guidance on the collection, use, sharing, retention, and protection of personal data across Fanatics’ products and operations.
- Support the development, implementation, and maintenance of privacy policies, notices, and internal governance standards.
- Advise on data incidents and any required regulatory notification requirements across various jurisdictions.
- Partner closely with product management, engineering, data, and technology teams to embed privacy considerations into the design, development, and deployment of products and platforms (“privacy by design”).
- Review and advise on privacy implications of new products, features, technologies, and data uses, including conducting and supporting privacy impact assessments (PIAs).
- Counsel on data-driven initiatives, including analytics, personalization, marketing technologies, and emerging technologies such as AI, from a privacy and data governance perspective.
- Review, draft, and negotiate privacy and data protection provisions in commercial agreements, including data processing agreements and vendor contracts.
- Support third-party risk management efforts related to data protection and privacy compliance.
- Monitor and assess evolving privacy and data protection laws, regulatory guidance, and enforcement trends, and advise on impacts to the business.
- Support responses to data subject requests, regulatory inquiries, and privacy-related incidents in coordination with Legal, Compliance, and Security teams.
- Assist with regulatory readiness, audits, and internal assessments related to privacy compliance.
- Provide proactive privacy advice to business stakeholders, balancing legal risk with business objectives.
- Contribute to the ongoing maturation of Fanatics’ global privacy program through process improvements, training, and cross-functional collaboration.
Requirements
- Juris Doctor (JD) degree from an accredited law school.
- Licensed to practice law in the United States.
- Minimum 6–9 years of legal experience, with a significant focus on privacy, data protection, and technology-related matters.
- Demonstrated experience providing product counseling and advising engineering, product, and technical teams.
- Combination of law firm and in-house experience strongly preferred; experience supporting consumer-facing, retail, digital, or global technology businesses is a plus.
- IAPP Certifications (CIPP/US, CIPP/E, CIPM) preferable.
- Strong ability to translate complex legal and regulatory requirements into clear, actionable guidance for technical and non-technical stakeholders.
- Familiarity with international privacy laws and cross-border data issues preferred.
- Excellent communication, collaboration, and organizational skills, with the ability to manage multiple priorities in a fast-paced environment.
Benefits
- Health insurance
- Flexible work arrangements
- Up to four weeks remote work per year
Applicant Tracking System Keywords
Tip: use these terms in your resume and cover letter to boost ATS matches.
Hard Skills & Tools
privacy lawdata protectionprivacy impact assessmentsdata processing agreementsregulatory compliancedata governanceanalyticsmarketing technologiesemerging technologiesprivacy policies
Soft Skills
communicationcollaborationorganizational skillsadvisingtranslating legal requirementsbalancing legal riskprocess improvementscross-functional collaborationmanaging multiple prioritiesbusiness-focused guidance
Certifications
Juris Doctor (JD)IAPP CIPP/USIAPP CIPP/EIAPP CIPM