Privacy Legal Counsel

Aristocrat Gaming • Las Vegas, NV

2d

About The Position

At Aristocrat, the Privacy Legal Counsel helps ensure the company’s gaming products meet high privacy and data protection standards. The role provides legal support for product development, data protection, and player experiences, working with product, engineering, and other teams to address privacy across the product lifecycle.

The counsel advises on privacy-by-design, new features involving player data, regulatory compliance, risk assessments, children’s privacy, data use in free-to-play models, third-party integrations, and international data transfers. The role also monitors emerging privacy and technology regulations and translates legal requirements into practical guidance for product teams.

Aristocrat describes its culture as vibrant and inclusive, promoting innovation, creativity, and excellence in gaming. It offers a compensation and benefits package intended to be competitive and support employee wellbeing. Specific compensation and benefits details will be discussed during recruitment; eligibility for annual bonuses and incentives, health and wellbeing benefits, paid time off, retirement plans, insurance coverage, and other local or statutory benefits may depend on the role and location.

Requirements

• Qualified lawyer in the US with at least 3 years of post-qualification experience (or equivalent).
• Strong foundation in privacy and data protection law, including CCPA, CPRA, HIPAA, COPPA, CAN-SPAM, GDPR, and UK GDPR.
• Experience advising on consumer-facing digital products or platforms, ideally in a product counseling role.
• Demonstrated ability to embed legal advice into product development processes.
• Excellent communication skills and ability to work cross-functionally with technical and non-legal teams.

Nice To Haves

• Experience in the gaming industry.
• Familiarity with ad tech, analytics, and data monetization models.
• Experience developing solutions involving children’s data, age verification, or youth safeguarding frameworks, such as Age Appropriate Design Code considerations.
• Privacy certification or specialization, such as CIPP/US, CIPP/E, or CIPM.
• In-house experience in a fast-paced technology or gaming environment.

Responsibilities

• Provide embedded legal support to product and engineering teams on privacy-by-design and privacy-by-default throughout the game lifecycle.
• Advise on developing and launching features involving player data, personalization, live operations, and online services.
• Conduct and guide Data Protection Impact Assessments (DPIAs) and risk assessments.
• Provide guidance on compliance with GDPR, UK GDPR, ePrivacy directives, and applicable European privacy regulations.
• Translate regulatory requirements into practical product guidance.
• Monitor and advise on upcoming US, EU, and UK developments, including the Digital Services Act, AI-related regulation, and children’s data rules.
• Counsel on data use in free-to-play models, including analytics, advertising, monetization, and player engagement features.
• Advise on children’s and teens’ privacy, age-appropriate design, parental controls, and profiling restrictions.
• Support use of virtual economies, telemetry, and behavioral data while managing regulatory risk.
• Evaluate third-party integrations such as analytics, ad networks, and SDKs, and advise on related data-sharing agreements.
• Draft and negotiate data protection clauses, data processing agreements, and cross-border transfer mechanisms such as SCCs and the UK IDTA.
• Work cross-functionally with GIS, Compliance, Product, Engineering, and Marketing on user protections and platform obligations.

Benefits

• Depending on role and location, potential eligibility for annual bonuses and incentives, health and wellbeing benefits, paid time off, retirement plans, insurance coverage, and other local or statutory benefits.

What This Job Offers

• Job Type: Full-time
• Career Level: Mid Level
• Education Level: No Education Listed