Senior Privacy Counsel

We are UMG, the Universal Music Group. We are the world’s leading music company. In everything we do, we are committed to artistry, innovation and entrepreneurship. We own and operate a broad array of businesses engaged in recorded music, music publishing, merchandising, and audiovisual content in more than 60 countries. We identify and develop recording artists and songwriters, and we produce, distribute and promote the most critically acclaimed and commercially successful music to delight and entertain fans around the world.
 

How We LEAD:

The Senior Privacy Counsel will serve as a key legal advisor to cross-functional teams—including product, legal, engineering, marketing, and commercial operations—on matters related to privacy, data protection, cybersecurity, AI governance, and data-driven transactions. In this global and fast-paced environment, the Senior Counsel will address complex and novel legal issues, helping to shape and operationalize the company’s responsible data strategy.  This role will provide high-impact, business-oriented legal counsel on a wide range of topics, including global privacy laws, cross-border data transfers, data governance, incident response, and vendor risk. Drawing on deep expertise in regulatory requirements and industry best practices, the Senior Privacy Counsel will apply a risk-based approach to ensure compliance, support scalable innovation, and enable the Company’s global growth and digital transformation initiatives.

How You’ll CREATE:

Key Responsibilities

• Privacy & Data Strategy:
  • Advise stakeholders (Legal, Product, Engineering, Marketing) on global privacy laws (GDPR, CCPA/CPRA, PIPL, and more), privacy-enhancing technologies, and AI/ML
  • Translate legal and regulatory requirements into business and technical guidance.
• Transactions & Contracting:
  • Draft, negotiate, and review privacy/security provisions in commercial contracts, ad-tech partnerships, platform integrations, and data-sharing agreements
• Product & AI Counseling:
  • Collaborate with product and engineering teams to embed privacy-by-design and responsible AI principles into new features and offerings
  • Conduct or support DPIAs and AI risk assessments, ensuring robust documentation and compliance.
• Cybersecurity & Incident Response:
  • Lead privacy and data security incident response, including coordination with forensics, drafting breach notifications, and liaising with regulators
• Regulatory Monitoring & Engagement:
  • Track developments in global privacy and cyber laws, regulatory guidance, and enforcement actions.
  • Support regulatory inquiries and prepare responses or disclosures.

Bring Your VIBE:

• 7+ years of legal experience in privacy, data protection, cybersecurity, and/or data governance
• Experience in a major law firm and/or in-house role, with deep experience with GDPR and U.S. state privacy laws, and a working knowledge of other international data protection laws.
• Strong transactional experience—drafting and negotiating privacy and security terms in commercial, data, and technology contracts.
• Strong background advising on cybersecurity incidents and conducting breach and incident response.
• Demonstrated deep understanding of AI governance, risk counseling for AI/ML systems, and AI-related regulatory frameworks.
• Proven track record in product counseling, DPIAs, and translating complex data issues into actionable plans.
• Excellent business judgment and ability to assess legal risk while also thinking strategically and providing practical real-world advice.

Perks Playlist:

• Be part of an entrepreneurial, global organization that values authenticity, drive, creativity, relationships, and a competitive spirit

• Comprehensive medical, dental, vision, and FSA options, as well as:

  • 100% coverage for out-patient mental health services

  • Wellbeing reimbursements for fitness classes, spa treatments, meal services, travel, and so much more (up to $720/year)

  • A lifetime fertility support allowance of $30,000 to plan participants

  • Student Loan Repayment Assistance and Tuition Reimbursement

  • 100% immediately vested 401(k) match on the first 5% of your contribution on eligible compensation

• Variety of ways to prioritize much-needed time away from work including:

  • Flexible Paid Time Off (PTO) for exempt employees

  • 3-weeks PTO for non-exempt employees

  • 2-weeks paid Winter Break

  • 10 Company Holidays (including Juneteenth and Wellbeing Day)

  • Summer Fridays (between Memorial Day and Labor Day)

  • Generous paid parental leave for every type of parent

Check out our full overview of benefits on the Perks Playlist page of the career site.

Disclaimer: This job description only provides an overview of job responsibilities that are subject to change.
Universal Music Group is an Equal Opportunity Employer

We are an E-Verify employer in Alabama, Arizona, Georgia, Mississippi, North Carolina, South Carolina, Tennessee, and Utah.

For more information, please click on the following links.

E-Verify Participation Poster: English / Spanish

E-Verify Right to Work Poster: English | Spanish

Salary Range:

The actual base salary offered depends on a variety of factors, which may include, as applicable, the qualifications of the individual applicant for the position, years of relevant experience, specific and unique skills, level of education attained, certifications or other professional licenses held, and the location in which the applicant lives and/or from which they will be performing the job.  All candidates are encouraged to apply.