Legal Counsel - Privacy

Title: Legal Counsel - Privacy

Location: Ireland

Requisition ID: 127881

Job Summary

Privacy and data protection is at the heart of NetApp’s business. The global regulation of data privacy is rapidly evolving, and NetApp continues to invest in a comprehensive Data Protection Compliance Program to manage increasing data privacy risks. This role offers the opportunity to help NetApp to deliver and maintain a robust compliance program to support our business and our customers.

The Legal Department plays a critical role within the NetApp organisation. The Legal Team provides front-line guidance and support to all areas of the company, contributing to decisions that impact NetApp’s growth and success every day.

Our growing Data Protection team supports NetApp on a cross-functional basis, first and foremost to ensure privacy compliance, but also serving as a valued partner and trusted adviser to internal clients - helping to enable business goals whilst appropriately managing and mitigating data protection related legal and reputational risk.

Our team deals with a wide range of issues including working closely with our internal and external business partners, ensuring Privacy by Design and appropriate privacy controls are incorporated into our existing and new products and services, providing subject matter expertise in relation to customer, vendor/supplier, partner and intra-group contract negotiations, liaising with data protection authorities, and dealing with new and rapidly changing legal and regulatory requirements on a global basis. Your role will require the management and support of a wide range of privacy and data protection matters, as well as providing day-to-day pragmatic privacy legal advice to key stakeholders.

We are looking for a Legal Counsel to support these global privacy compliance efforts. This role reports to our Managing Counsel, Data Protection. The role is global, addressing privacy and data protection issues in regions in which we operate (EMEA and also US, Canada, APAC and LATAM)

What you will do

• Partner with key internal stakeholders to execute NetApp’s privacy strategy across our organisation in support of our business goals.
• Assist with the review, negotiation and implementation of the privacy aspects of strategic deals at NetApp.
• Collaborate in the design and ongoing update of public-facing privacy policies, standards and procedures.
• Provide training and education on privacy regulations and promote a privacy-focused culture throughout NetApp.
• Conduct and review privacy risk assessments, Transfer Impact Assessments and Data Protection Impact Assessments, ensuring global data transfer compliance.
• Provide guidance on the implementation, and maintenance of organisational privacy compliance processes and procedures in coordination with our internal business units.
• Assist with employee related privacy matters and collaborate with our HR teams.
• Work closely with internal product and engineering teams and stakeholders to ensure NetApp products and services are compliant in the jurisdictions in which we operate, including supporting the incorporation of Privacy by Design in the end-to-end lifecycle of new products and services at NetApp by participating in NetApp’s product design and launch process.
• Draft, review and negotiate a broad range of data protection provisions within commercial contracts, data processing agreements and other associated documents relating to NetApp’s various business activities.
• Review third-party vendors, sub-processors and partners to ensure all privacy concerns, requirements, and responsibilities are addressed and appropriately managed.
• Monitor global changes in the tech industry and in privacy legislation, carry out analyses of the impact to NetApp and recommend updates to our compliance programme.
• Advise on emerging and evolving laws and regulations, such as artificial intelligence.
• Advise and support engagement with data subjects to ensure that data subjects’ rights are appropriately upheld, including support of Data Subject Access Requests.
• Support engagement with data protection authorities in relation to inquiries, complaints and disputes.

Required Experience

• Qualified lawyer with 3-6+ years post-qualification experience. Ideally you will have a strong background advising technology companies on responsible uses of data, privacy risk assessment, and privacy best practices.
• In-depth knowledge of GDPR and other relevant privacy laws and regulations in EMEA. Familiarity with and recent experience of US privacy laws, including CCPA/CPRA, an advantage. Knowledge of APAC and/or LATAM privacy laws also desirable.
• CIPP, CIPM or similar privacy qualification preferred, but not essential.

Other Skills & Experience

• Team player, able to influence, collaborate, negotiate and solve problems with Legal colleagues, business partners and expert teams across organisational lines.
• Strong organisational, analytical and critical thinking skills, with strong attention to detail and accuracy.
• Desire and ability to quickly learn about the activities and specificities of our business model, advanced technology capabilities, and evolving regulatory environment.
• Ability to work in a fast-paced environment, prioritising conflicting demands & priorities from multiple business partners, and making sound decisions on tight deadlines.
• Flexibility and enthusiasm, and the willingness to roll up your sleeves and take responsibility for resolving issues.
• Experience working on IT security issues is helpful but not essential.
• Excellent written, presentation and interpersonal communication skills.
• Fluent English.