Sr. Counsel, Privacy - International

Overview

The Sr. Counsel, Privacy (International) position delivers an opportunity to join a dynamic, pioneering, and collaborative global privacy legal team committed to propelling Chick-fil-A's innovative business strategies through solutions-oriented strategic legal advice. The Sr. Counsel, Privacy (International) role is responsible for providing legal advice on privacy, data security, and other data protection issues to Chick-fil-A's international teams in the U.S., UK, EU, and Asia and will work to ensure Chick-fil-A's regulatory compliance through its global privacy program. This is an in-person role, reporting to Chick-fil-A's Privacy Officer.

Our Flexible Future model offers a healthy mix of working in person and virtually, strengthening key elements of the Chick-fil-A culture by fostering collaboration and community.

• Supporting cross-functional teams with legal advice and counseling to support Chick-fil-A's pioneering efforts as it expands its market footprint into the U.K, EU, Asia, and beyond.
• Partnering with and helping drive execution across a variety of different internal departments and cross-functional teams, including Chick-fil-A's cross-functional Privacy Team, project teams, Marketing, Talent, Enterprise Data & Analytics, Financial Services, Digital Transformation & Technology, and many more.
• Providing data protection advice for various international initiatives, including Operator and Talent acquisition and management, digital marketing ventures, and website and app development, by guiding the business to follow relevant international regulations and advising on compliance with Chick-fil-A's global privacy and data protection program.
• Leading Chick-fil-A's strategy on global Data Protection Addenda ("DPAs") and partnering with the Commercial Transactions Team to review and negotiate complex DPAs escalated to the Legal Privacy Office for review.
• Managing, assessing and/or reviewing various privacy assessments, including Data Inventory Assessments ("DIAs"), Data Protection Impact Assessments ("DPIAs"), Transfer Impact Assessments ("TIAs"), and Legitimate Interest Assessments ("LIAs").
• Supporting in the implementation, operationalization, management and execution of privacy rights processes globally.
• Developing and updating privacy-related notices, policies, procedures and guidelines.
• Providing legal counsel and strategic guidance on the cross-border transfer of personal information between CFA affiliate entities and suppliers.
• Supporting investigations and response efforts concerning data security incidents, when needed.
• Partnering with Chick-fil-A's Privacy Officer and Privacy Program Manager to support alignment of Chick-fil-A's data privacy strategy across the enterprise.
• Tracking and monitoring international privacy-related legislative changes, including international AI/ML laws affecting privacy.
• Advising on miscellaneous regulatory work, where applicable.

• Knowledge of global privacy and data protection laws, regulations, and industry guidelines.
• Savvy and sophisticated interpersonal skills, including the ability to make the complex simple while advising business partners at all levels of the organization, from entry level to senior leadership and everything in between.
• Comfortable with pioneering work in uncharted territories in a rapidly evolving regulatory landscape.
• Experience advising businesses with multiple corporate entities under a single or related governance structure.
• Ability and willingness to quickly develop expertise in legal and regulatory areas to meet needs of our dynamic business. Embrace a love of learning.
• Highly motivated team player who exhibits self-leadership, autonomy and independent decision-making, and initiative to solve problems, answer questions and prevent problems, where possible.
• Strong critical and analytical thinking skills, with the ability to pragmatically weigh the risks and benefits of complex situations.
• State Bar Membership

• CIPP/US, CIPP/E, CIPM, and/or CIPT or other relevant privacy certification desired, although not required.