Privacy Paralegal

Hasbro•Boston, MA

11d•$73,600 - $110,400•Onsite

About The Position

Hasbro's Global Privacy team supports the whole company, ensuring that games, websites, and products handle the personal data of players, employees, and fans responsibly. This role is central to the day-to-day operations of the privacy program, acting as the primary contact for internal teams with privacy questions and developing processes to support a large company with a small team. The position will be onsite at Hasbro's new HQ location in Boston, MA, with flexibility for interim locations in Pawtucket, RI, or Boston, MA.

Requirements

College degree or equivalent experience; paralegal certificate a plus.
At least 3 years supporting a legal or compliance function, ideally in privacy or data protection.
Solid understanding of US state privacy laws, GDPR, and children's privacy rules (COPPA).
Experience with a privacy management platform such as Ketch or OneTrust.
Experience working closely with technical teams, capable of understanding and documenting requirements from engineers.
Proficiency in Word, Excel, PowerPoint, SharePoint, MS Teams, and Jira.
Knowledge of privacy management functions: handling privacy tools, conducting data mapping, and documenting processing activities.
Willingness to work with colleagues and collaborators in other time zones and business units.
Comfortable with technical details of data collection, transmission, and storage across various platforms (websites, mobile apps, APIs, SDKs, databases, tag managers) to translate legal requirements into engineering specifications.

Nice To Haves

CIPP certification (CIPP/US, CIPP/E, or similar).
Experience with cookie and tracking consent management, and website compliance reviews.
Drafting experience with Data Processing Agreements (DPA).

Responsibilities

Build and refine processes for reporting, sorting, and prioritizing privacy incidents and inquiries, serving as the first point of contact for the business.
Work with Legal, Marketing, Central Technology, and Privacy Operations on technology compliance, including consistent classification of data collection purposes across sites and products.
Collaborate with Privacy Operations to maintain up-to-date data maps and records of processing activities, and manage the privacy tech stack (consent tooling, request workflows, assessment intake) as products, vendors, and teams evolve.
Engage with engineering, web development, and marketing technology teams to understand data flow through sites and apps (tag managers, SDKs, APIs, backend systems) and implement consent, preference, and data collection requirements.
Coordinate privacy reviews for new products, features, and vendors, assembling technical details for legal assessment and managing the review process to a decision.
Assist in building privacy notices and policies, working with attorneys on language and positioning in response to regulatory changes.
Represent the privacy group as the main liaison to Product Development and engineering, integrating compliance requirements into website and platform workflows early.
Write playbooks, templates, and standard operating procedures for program operations.
Supervise the privacy program's budget and handle invoicing.
Plan Global Data Privacy Day and other company-wide privacy awareness efforts.
Prioritize the privacy team's SharePoint documentation for audit response.
Answer privacy questions from other departments, subsidiaries, and affiliates, translating legal requirements into practical, actionable direction.