Legal Counsel, Privacy and Data Protection

The Nielsen Company

1d • Hybrid

About The Position

The Legal Counsel, Privacy and Data Protection provides sophisticated, practical, business-oriented legal advice on EU/EEA privacy and data protection matters across Nielsen’s products, services, commercial relationships, and internal operations. The role independently manages complex privacy workstreams, supports Nielsen’s European privacy program, and advises local sales and business teams. It works closely with Product, Engineering, Data Science, Information Security, Procurement, Sales, Marketing, and Legal colleagues across jurisdictions.

The position provides senior guidance on privacy compliance, data governance, and risk mitigation; applies legal expertise to complex privacy and commercial issues; and drafts, reviews, and negotiates data protection terms on both the buy-side and sell-side. The role also helps stakeholders understand complex or sensitive issues in clear, actionable terms and may work remotely within the UK, with a central-London office available for hybrid work.

Requirements

• Extensive experience practicing privacy, data protection, technology, commercial, or related legal work in-house, with a track record of producing high-quality independent work.
• Law degree or equivalent legal qualification.
• Qualification or admission in the UK, as required for the role.
• Deep, practical knowledge of the GDPR and applicable national privacy and data protection laws in at least one relevant European jurisdiction, with ability to apply requirements across products, contracts, and business processes.
• Demonstrated experience conducting or overseeing DPIAs/PIAs, transfer impact assessments, legitimate interest assessments, and privacy risk assessments, including documenting risks and tracking mitigations.
• Demonstrated experience drafting, reviewing, and negotiating DPAs, data protection exhibits, and other privacy-related contract terms, including advising both buyers/customers and sellers/providers of data or services.
• Experience advising business, sales, product, technology, or commercial teams on complex privacy issues and translating legal requirements into practical, commercially workable solutions.
• Strong legal research, writing, negotiation, analytical, and issue-spotting skills, sound judgment, and ability to build consensus among diverse stakeholders.
• Excellent written and verbal English communication skills.

Nice To Haves

• Experience engaging with or supporting communications to supervisory authorities, regulators, or other public-sector stakeholders.
• Fluency in an additional European language.
• CIPP/E certification; it is greatly preferred but not a hard requirement.
• CIPM, CIPT, or an equivalent privacy credential.
• Adtech, martech, media measurement, audience analytics, data licensing, or digital advertising experience.
• Knowledge of U.S. privacy and data protection requirements, including U.S. state privacy laws and the CCPA/CPRA.
• Knowledge of APAC privacy and data protection regulations, particularly India’s Digital Personal Data Protection framework, Australia’s Privacy Act and Australian Privacy Principles, or South Korea’s Personal Information Protection Act.
• Familiarity with international data transfers, standard contractual clauses, cross-border data sharing, consent and preference management, privacy management tools, data mapping, and records of processing activities.

Responsibilities

• Provide day-to-day advice on EU/EEA GDPR, national implementing laws, EDPB guidance, supervisory-authority decisions, ePrivacy requirements, marketing and consumer protection rules, and other relevant European data protection and digital regulations.
• Translate privacy and data protection developments into practical guidance, contract language, policies, notices, processes, and implementation requirements for local and global stakeholders.
• Draft, review, and negotiate data processing agreements, data protection exhibits, data sharing and data use agreements, data transfer arrangements, and related commercial contract provisions, representing Nielsen on both the buy-side and sell-side.
• Advise local sales and business teams on privacy aspects of customer agreements, proposals, product offerings, data services, partnerships, and other commercial opportunities.
• Conduct or oversee privacy impact assessments, transfer impact assessments, legitimate interest assessments, and other privacy risk assessments.
• Conduct privacy due diligence on third parties, vendors, customers, and strategic partners; assess processing activities and data flows, identify gaps, negotiate remediation, and support ongoing oversight.
• Advise on advertising technology, audience measurement, analytics, identity, cookies, pixels, SDKs, targeted advertising, consent and preference management, data monetization, and related media and marketing data practices.
• Partner with relevant business and technical stakeholders to assess data collection, use, disclosure, retention, and deletion, and support compliant product launches and operational changes.
• Communicate with or support communications with data protection and other supervisory authorities in connection with inquiries, consultations, complaints, audits, filings, investigations, and data incidents.
• Support privacy incident and data breach response, data subject rights escalations, regulatory inquiries, audits, and other privacy compliance matters in coordination with business teams, security, legal, and outside counsel.
• Contribute to and improve privacy program materials, including policies, procedures, playbooks, templates, training, records of processing, data inventories, retention requirements, and compliance reporting.
• Monitor EU/EEA and national privacy law, enforcement trends, and related digital regulation; assess business impacts and communicate recommendations.

Benefits

• Competitive salary and benefits.
• Varied area of responsibility.
• Open corporate culture with development opportunities.
• Ability to work independently in a motivated, friendly team.
• Informal atmosphere in a dynamic media company, with opportunities for ownership and personal development.

What This Job Offers

• Job Type: Full-time
• Career Level: Senior
• Education Level: No Education Listed