Counsel - Privacy

United Airlines•Chicago, IL

2d•$175,750 - $210,000•Hybrid

About The Position

An accomplished attorney will work within the Global Compliance and Ethics function of the Legal Department, developing and guiding United’s global privacy program. The role provides legal advice and counsel on customer and employee data privacy programs and offers leadership and legal expertise on privacy issues and compliance matters. Responsibilities include conducting risk assessments, supporting privacy program metrics and reporting, advising business leaders and Legal Department colleagues, and helping resolve privacy-related legal issues involving a broad and complex range of risks. The position is part of the Privacy team and reports to the Senior Managing Counsel. It works collaboratively with other Legal Department members, the Cybersecurity and Digital Trust team, and a wide variety of business partners. The role is hybrid in Chicago.

Requirements

Juris Doctor degree and membership in good standing in a state Bar.
At least 5 years of experience crafting and implementing comprehensive global privacy programs, processes, and procedures.
Experience providing privacy counsel to consumer-facing businesses with large employee populations.
Experience evaluating and responding to data incidents.
In-house, government, or large law firm experience.
In-depth knowledge of privacy law, including GDPR, U.S. state privacy laws such as CCPA/CPRA and comprehensive state laws, and other federal and international privacy and data protection laws and regulations.
Experience providing guidance and collaborating cross-functionally on emerging and evolving topics, including ad tech, tracking technologies, digital marketing programs, consent management, children’s privacy, sensitive data categories, geolocation data, biometrics, and automated decision-making.
Familiarity with privacy technology platforms used to manage assessments, data subject requests, and consent.
Ability to build and maintain strong collaborative relationships with business partners.
Effective business writing and presentation skills, with excellent interpersonal abilities.
Strong communication skills and experience presenting to senior management and/or external audiences.
Excellent leadership and project management skills, with strong business judgment.
Strong business acuity to evaluate potential strategies and provide practical business, legal, and compliance advice.
Leadership in developing and maintaining effective privacy policies and initiatives.
Ability to identify, develop, and implement programs, processes, and procedures in the privacy area.
Attention to detail.
Ability to work independently and meet deadlines.
Legally authorized to work in the United States for any employer without sponsorship.
Successful completion of an interview.
Reliable, punctual attendance.

Nice To Haves

Certified Information Privacy Professional (CIPP)/US or Certified Information Privacy Professional (CIPP)/EU certification.

Responsibilities

Identify, create, and implement standard processes around data privacy.
Provide global privacy legal advice and privacy input on business projects and initiatives.
Analyze new and current laws and regulations, advise the business on privacy obligations, and carry out privacy compliance operations.
Support regulatory inquiries and enforcement matters as needed.
Collaborate with senior management, cross-functional teams, Cybersecurity and Digital Risk teams, and Cybersecurity counsel on privacy strategy and guidance.
Conduct or support privacy-related investigations, incident response, complaint handling, and litigation.
Maintain privacy-related policies and internal and external privacy notices.
Conduct and oversee privacy impact assessments and related assessments.
Support data governance initiatives, including data minimization guidance.
Draft, negotiate, and advise the business on privacy aspects of contracts, including cross-border data transfer mechanisms.
Manage and advise outside counsel on privacy matters.
Use and help design the company’s privacy technology platform.
Identify, develop, and deliver privacy training to relevant employee groups through various mechanisms.
Support privacy program metrics and reporting, conduct risk assessments, and advise business leaders and Legal Department colleagues.
Identify and contribute to the resolution of privacy-related legal issues involving a broad and complex range of risk exposure.