Director, Privacy & Data Governance Counsel

Loblaw; Brampton; On-site; CAD 170,000 - 220,000; Full time

Job summary

Loblaw Companies Limited in Brampton is seeking a Director, Legal Counsel, Data & Privacy to lead our privacy and data governance program. You will shape policy, manage compliance, and partner with business teams to embed privacy by design across products and services.

You'll provide strategic legal advice on privacy, data governance, CASL, and regulatory matters, while guiding breach response, risk assessments, and vendor arrangements. This role reports to the Enterprise Privacy Officer.

Qualifications

• 7–10 years of in-house or compliance experience focusing on privacy and regulatory matters.
• Experience advising on CASL and related regulatory requirements.
• Ability to interpret privacy laws and provide practical, business-oriented guidance.
• Experience drafting and negotiating complex privacy and cybersecurity provisions.

Responsibilities

• Provide strategic privacy, data governance, and CASL legal advice across the enterprise.
• Oversee DPIAs and assess data/privacy risk with actionable controls.
• Lead privacy, data and cybersecurity negotiations in commercial agreements.
• Manage privacy breach and regulator engagement activities.
• Build and develop a high-performing data and privacy team.

Skills

Privacy law

Data governance

CASL compliance

Contract drafting

Regulatory risk management

Leadership

Privacy DPIAs

AI governance

Stakeholder engagement

In-house counsel

Education

Law degree

Ontario Bar admission

Job description

Loblaw Companies Limited in Brampton is seeking a Director, Legal Counsel, Data & Privacy to lead our privacy and data governance program. You will shape policy, manage compliance, and partner with business teams to embed privacy by design across products and services.

You'll provide strategic legal advice on privacy, data governance, CASL, and regulatory matters, while guiding breach response, risk assessments, and vendor arrangements. This role reports to the Enterprise Privacy Officer.