Legally qualified in the US with a Juris Doctor (JD) from an accredited US law school
Active membership in at least one US state bar (NY preferred)
Ideally 3-5 years minimum experience in data privacy, data protection and digital laws and regulations
In-house experience preferred in a similar sector to Condé Nast, including a thorough knowledge
Responsibilities
Serve as a legal advisor for cross-functional product teams building and evolving digital platforms, apps, tools and AI solutions
Advise on the legal and regulatory aspects of product development, including privacy, data protection, AI, AdTech, consumer protection and risk
Partner closely with engineering, product management, data governance, security and commercial teams from ideation to launch
Support the business on day-to-day data privacy matters in the US market, including contract and document reviews from a US privacy perspective; marketing and data use consents; privacy impact assessments
Support responses to privacy related regulatory investigations and assessing litigation risk in the US market working closely with CN’s parent company, Advance Publications, regarding US privacy laws
Partnering with relevant stakeholders, provide legal support to the Executive Director on privacy related breaches in the US market
Support the completion of privacy rights requests in the US market
Monitor emerging laws and regulatory guidelines (e.g. US state privacy laws, AI regulation, CPRA/CPPA, FTC rules) and translate them into practical advice
Draft and negotiate product and tech related data processing agreements
Partner with Product teams to ensure cookie consent frameworks and other tracking technologies comply with global regulations in collaboration with the Data & Tech team
Advise on website platform compliance, including disclosures, terms of service, age gating, accessibility (EAA/ADA), dark patterns, and consumer rights mechanisms
Keep up to date with the latest developments in legal, commercial and industry trends
Promote Condé Nast’s data governance strategies and activities in-market
Help shape internal policies, standards, and training materials relating to data privacy, data protection, information security, product development and responsible data use