DescriptionProvide legal review, guidance and support on privacy, data protection and security matters across The Kroger Co. and its affiliated companies. Partner cross-functionally with the business, including IT, sourcing, product development, engineering, information security, and our other Company attorneys to inform, influence and advise on data uses and privacy strategies while managing legal risk and ensuring regulatory compliance involving use of personal information. Must have a strong foundation in drafting and negotiating complex contracts and in-depth knowledge and expertise on data privacy and security laws. Provide legal review, guidance and support on privacy, data protection and security matters across The Kroger Co. and its affiliated companies. Partner cross-functionally with the business, including IT, sourcing, product development, engineering, information security, and our other Company attorneys to inform, influence and advise on data uses and privacy strategies while managing legal risk and ensuring regulatory compliance involving use of personal information. Must have a strong foundation in drafting and negotiating complex contracts and in-depth knowledge and expertise on data privacy and security laws. Demonstrate the company’s core values of respect, honesty, integrity, diversity, inclusion, and safety.
Responsibilities
- Draft, review and negotiate data protection addendums and other data-related agreements for wide-ranging business initiatives, including with vendors, clients, and business partners
- Negotiate a wide range of complex commercial transactions involving consumer data, including technology, marketing, and license agreements
- Provide pragmatic privacy and data security subject matter expertise, guidance and advise on compliance with all applicable laws, rules and regulations
- Partner with our Privacy Office to support, enhance, scale and run Kroger’s existing privacy program, including privacy operations and documentation; employee training; policy enforcement, and monitoring and auditing
- Collaborate with compliance, information security and other stakeholders to perform privacy assessments
- Proactively monitor and remain up to date on relevant consumer protection, privacy and data security laws and regulations, enforcement actions, technological developments, threat vectors, industry and regulatory trends and topics, and evolving industry standards and best practices
- Work with privacy legal team members to maintain, update, and draft contract templates and playbooks
- Provide legal support for security incident response activities
- Must be able to perform the essential job functions of this position with or without reasonable accommodation
QualificationsMINIMUM
- 7+ years combined experience in law firms, governmental agencies, and/or in-house legal departments
- 4+ years of experience providing pragmatic and actionable advice to clients on various legal risks and obligations under privacy and data security laws in the U.S.
- Juris Doctor from accredited U.S. law school
- Admission to at least one state bar
- Exceptional contract drafting and written communication skills
- Extensive experience drafting and negotiating data privacy and security terms and agreements, with retail media and advertising experience strongly preferred
- Experience drafting and negotiating complex technology, license, data sharing, ad tech, and other agreements with privacy-implications
- Expert knowledge and understanding of data privacy and security laws, regulations and industry best practices, with expertise on how those laws apply in the digital media and advertising space strongly preferred
- Ability to translate legal advice into actionable guidance for product, engineering, security, and business teams
- Ability to work with IT professionals and knowledge of basic IT terms and concepts
- Strong analytical, strategic thinking, and communication skills with demonstrated legal and business judgment
- Strong ethical compass and problem-solving skills
- Demonstrate the company's core values of respect, honesty, integrity, diversity, inclusion and safety.
- Ability to build and manage a network of key stakeholder relationships
DESIRED
- Bachelor's Degree in IT, Data Analytics or Cybersecurity
- Previous work experience in ad tech/marketing
