Privacy Paralegal

Hasbro•Boston, MA

11d•Hybrid

About The Position

We are looking for a Privacy Paralegal to own the day-to-day operations of Hasbro's Global Privacy program. This is a hands-on role with significant ownership, where you will be the primary contact for internal teams seeking privacy guidance. You will develop processes to support a large company with a small team, ensuring that games, websites, and products handle personal data responsibly. The role involves collaborating with various departments, including Legal, Marketing, Central Technology, and Privacy Operations, to ensure technology compliance, maintain data maps, manage privacy tools, and coordinate privacy reviews for new initiatives. You will also assist in drafting privacy notices and policies, act as a liaison to Product Development and engineering, and help integrate compliance requirements early in the development process. Additionally, you will be responsible for creating playbooks, supervising the privacy program's budget, and planning company-wide privacy awareness efforts.

Requirements

College degree or equivalent experience.
At least 3 years supporting a legal or compliance function, ideally in privacy or data protection.
Solid understanding of US state privacy laws, GDPR, and children's privacy rules (COPPA).
Experience with a privacy management platform such as Ketch or OneTrust.
Experience working closely with technical teams, capable of understanding and translating requirements between legal and engineering.
Proficiency in Word, Excel, PowerPoint, SharePoint, MS Teams, and Jira.
Knowledge of privacy management functions: handling privacy tools, conducting data mapping, and documenting processing activities.
Willingness to work with colleagues in other time zones and business units.
Comfort with technical details of data collection, transmission, and storage across various platforms (websites, mobile apps, APIs, SDKs, databases, tag managers) to translate legal requirements for engineers.

Nice To Haves

Paralegal certificate.
CIPP certification (CIPP/US, CIPP/E, or similar).
Experience with cookie and tracking consent management, and website compliance reviews.
Drafting experience with Data Processing Agreements (DPA).

Responsibilities

Build and refine processes for reporting, sorting, and prioritizing privacy incidents and inquiries, serving as the first point of contact for the business.
Work with Legal, Marketing, Central Technology, and Privacy Operations on technology compliance, including consistent classification of data collection purposes across sites and products.
Collaborate with Privacy Operations to maintain up-to-date data maps and records of processing activities, and manage the privacy tech stack (consent tooling, request workflows, assessment intake) as the company evolves.
Engage with engineering, web development, and marketing technology teams to understand data flow through sites and apps (tag managers, SDKs, APIs, backend systems) and implement consent, preference, and data collection requirements.
Coordinate privacy reviews for new products, features, and vendors, assembling technical details for legal risk assessment and ensuring timely decisions.
Assist in building privacy notices and policies, working with attorneys on language and positioning in response to regulatory changes.
Represent the privacy group as the main liaison to Product Development and engineering, integrating compliance requirements into workflows early.
Write playbooks, templates, and standard operating procedures to maintain program operations.
Supervise the privacy program's budget and handle invoicing.
Plan Global Data Privacy Day and other company-wide privacy awareness efforts.
Prioritize privacy team's SharePoint documentation for audit response readiness.
Answer privacy questions from other departments, subsidiaries, and affiliates, translating legal requirements into practical, actionable direction.