Associate Director, Data Privacy

Sony Music Global Job Board•New York, NY

5d•$90,000 - $120,000•Onsite

About The Position

As Senior Manager, Data Privacy, you will act as a trusted advisor to the business, providing pragmatic and commercially focused privacy guidance across departments. Working closely with stakeholders globally, you will play a key role in supporting the organisation to manage data responsibly, maintain compliance, and build consistent, high-quality data protection practices across the business.

Requirements

A minimum 5 years PQE
Excellent analytical and communication skills
Ability to work with others within group and across divisions
Strong negotiation skills and work ethic
Team player with strong interpersonal skills, emotional intelligence, good judgment, and intellectual curiosity
Demonstrated ability to build trusted advisor relationships with internal clients, together with commitment to provide the highest quality internal client support

Responsibilities

Drafting and negotiating one off data-share agreements (e.g., artists, distribution clients, ticketing partners, co-promoters)
Support of Product Design & Engineering team and labels’ onboarding of new tools
Contracts: review / draft data protection provisions in vendor agreements and/or negotiate the longform Data Privacy & InfoSec rider for all of our stakeholders (CMG, GDB, MLive, The Orchard, AWAL, KNT, Ceremony of Roses, PX, B&LA globally…)
M&A due diligence – multiple deals in progress at once
initial responses review & follow ups
reviewing data provisions in the sales agreement
post-acquisition integration
Orchard / AWAL / KNR – data breach support
Data import & export requests – requiring approval or privacy policy interpretation, or a data-share agreement
Cross-OpCo collaborations: location based events – project review; review and/or drafting of contract data privacy provisions (e.g., vendor, location, co-promotion, IP licence agreements), privacy & transparency notices, opt-in language
Contest queries – local and multi-market contests - re. data ingestion, sharing data with promoters and prize providers, opt-in wording, UGC advice
Marketing queries - labels, International Marketing and CRM – review campaigns and advise on language, opt-in requirements, transparency concerns, nudge techniques / dark patterns, UGC elements, and incentivising streaming
Data Subject Access Requests (“DSARs”) – from employees or former employees, artists (increase since Artist Forward), consumers – can take one to three months of to identify, review, redact and collate the response
CRM – advise on data rights requests (e.g. deletion/unsubscribe requests)
Data deletion run twice a year – review each market’s deletion exceptions
PX support – DE&I surveys, global career site, company-wide initiatives
Litigation support – nuisance cookie claims, DSARs escalating to litigation, requests from authorities for personal data of artists.
Conducting and documenting Privacy Impact Assessments and Data Protection Impact Assessments.