Senior Privacy Counsel

Lululemon Athletica Inc•Seattle, WA

62d•Hybrid

About The Position

lululemon is an innovative performance apparel company for yoga, running, training, and other athletic pursuits. Setting the bar in technical fabrics and functional design, we create transformational products and experiences that support people in moving, growing, connecting, and being well. We owe our success to our innovative product, emphasis on stores, commitment to our people, and the incredible connections we make in every community we're in. As a company, we focus on creating positive change to build a healthier, thriving future. In particular, that includes creating an equitable, inclusive and growth-focused environment for our people. We are self-described "legal outliers." Our vision is to inspire and educate, provide value from beginning to end and create an environment where work enriches life, and life enriches work. We believe in movement, relationships and personal development - and we live it every day. This role requires expert counsel and strategic legal advice on a broad range of complex privacy matters. This role will counsel on initiatives and strategies for managing risk around emerging privacy legislation. This role has a global mandate and will address privacy matters, company projects, and initiatives that carry considerable regulatory, legal, financial, and reputational risk to lululemon. The Senior Privacy Counsel role requires extensive expertise and significant depth of knowledge and skill with respect to legal issues. This role works independently to provide guidance to business and legal leaders on a wide range of complex and escalated situations and requires keeping current with best practices, multi-jurisdictional legislative changes, and emerging case law regarding data privacy. This role is key to providing privacy product counsel to the Technology, Digital, Asset Protection, and other key stakeholder partners in how we create and roll out new features and offers. The Senior Privacy Counsel is responsible for educating Legal Team Members (including leadership) and cross-functional partners about changes in global privacy laws and regulations, as well as our ability to comply with such changes, applying it to the lens of our business. Ultimately, this role will be able to digest the complex and nuance changes in privacy legislation and communicate it simply with our stakeholders. The Senior Privacy Counsel is responsible for responding to, managing, and providing expert advice during incidents - including management of outside counsel and updates to senior leadership.

Requirements

Excellent organizational and communication skills, and the ability to communicate privacy and legal concepts to technical and non-technical audiences.
Ability to thrive in a fast-paced, dynamic, sometimes ambiguous environment.
Experience navigating European data privacy requirements and advising regional business teams.
Possess sound legal and business judgement and flexibility/adaptability to manage multiple wide-ranging matters, conflicting deadlines, and new areas of expertise as business needs change.
Excellent problem identification, problem solving, and analytical skills.
Ability to establish cross-functional, collaborative relationships with business and technology partners.
Exceptional communication skills to advise stakeholders across the business on complex legal concepts.
Ability to negotiate with and influence key stakeholders internally.
Admission into the bar of Practice or the ability to register as in-house counsel.
7+ years of privacy legal experience. Prior in-house experience preferred and/or experience in the retail sector. Licensed to practice in Washington state or ability to practice in house.
Understanding of key global privacy and marketing compliance laws including CCPA/CPRA, PIPEDA, GDPR, regional data breach regulations, CAN-SPAM, COPPA, CASL, etc. Knowledge of common privacy laws, practices, and regulatory frameworks (PCI, GDPR, SOX, etc.), as well as a general understanding of various retail technologies, information security, and risk management standards. Strong knowledge in digital technologies (i.e., social media, digital advertising, mobile apps, mobile payments), with particular focus on how these technologies are used to collect, use and/or share information.

Nice To Haves

Certifications such as CIPP, CIPM preferred.

Responsibilities

Day to day legal direction on complex global privacy laws and regulations with diverse business stakeholders.
Provide direction to teams during incidents, engagement of outside counsel, and generating clear guidance to both business and legal leaders.
Ability to provide tactical risk-based guidance that balances business objectives, company values, and shifting compliance requirements.
Provide direction on Organizational and Departmental strategy to create appropriate implementation strategies and effectively advise cross-functional partners.
Partners closely with the Cybersecurity team, revising existing policies, procedures, and continued counsel.
Completes complex risk assessments on critical business initiatives with consistently clear guidance to business stakeholders.
Provides direction to cross-functional partners on external vendor relationships and business goals, as well as quickly collecting input from key departments to apply policies and minimize risk, including Insurance, Finance, and Information Security.
Identifies legal issues, analyzes risks, and creates and implements solutions structured to achieve business objectives efficiently with rationalized legal and practical risk. This role also engages directly with external counsel on incidents, data subject access requests and new legislation.
Collaborates with the rest of the Privacy team on compliance execution, matter and regulatory tracking, program maturity projects, and reporting to leadership.
Provides clear counsel on legal matters to all levels within the organization, working independently and representing the Privacy team on complex privacy issues.