Global Director of Privacy & Data Protection

Universal Music Group; Santa Monica (CA); On-site; USD 90,000 - 180,000; Full time

Benefits offered by this job

Comprehensive medical, dental, and vis

401(k) with 100% immediate vesting

Fertility coverage

Wellbeing reimbursements

Tuition reimbursement

Job summary

Universal Music Group in Santa Monica, CA, seeks a Director of Privacy & Data Protection to lead practical privacy counsel across contracts, data subject rights, incident response, and consumer data practices.

You'll partner with Legal, Information Security, and business teams to ensure compliant handling of personal data globally, while guiding privacy strategies and risk management for artists, platforms, and marketing initiatives.

Qualifications

• J.D. from an accredited law school and active U.S. state bar.
• 8+ years of relevant legal experience in privacy, data protection, or cybersecurity.
• Experience drafting data processing agreements and privacy provisions in commercial agreements.
• Strong knowledge of U.S. privacy laws (CCPA/CPRA) and GDPR.
• Excellent drafting, negotiation and cross-functional collaboration skills.

Responsibilities

• Draft, review, and negotiate privacy terms in commercial agreements.
• Advise on privacy rights requests and incident-related communications.
• Support cybersecurity incident response and regulatory inquiries.
• Provide privacy guidance across websites, apps, and marketing activities.
• Monitor developments in privacy law and train teams as needed.

Skills

Privacy law

Contract drafting

Data privacy

Regulatory compliance

Negotiation

Cross-functional collaboration

Incident response

CIPP/US preferred

Education

J.D. from an accredited law school

Active U.S. state bar admission

Job description

Universal Music Group in Santa Monica, CA, seeks a Director of Privacy & Data Protection to lead practical privacy counsel across contracts, data subject rights, incident response, and consumer data practices.

You'll partner with Legal, Information Security, and business teams to ensure compliant handling of personal data globally, while guiding privacy strategies and risk management for artists, platforms, and marketing initiatives.