Global Privacy & Data Protection Director

Universal Music Group; New York (NY); On-site; USD 90,000 - 180,000; Full time

Benefits offered by this job

Comprehensive medical, dental, and视ion

Fertility coverage

Wellbeing reimbursements

Student Loan Repayment Assistance

401(k) with immediate vesting

Flexible PTO

Paid holidays and time off

Job summary

Universal Music Group in New York is seeking a Director of Privacy & Data Protection to lead global privacy initiatives. The role partners with Legal, Information Security, and business teams to apply privacy law fundamentals to contracts, data processing, and regulatory compliance.

The ideal candidate has a JD, 8+ years of experience, and strong drafting and negotiation skills. You will manage day-to-day privacy matters, respond to data subject requests, and guide programs across labels and

Qualifications

• J.D. from an accredited law school and state bar membership
• 8+ years of relevant legal experience in privacy, data protection, cybersecurity, or related field
• Experience drafting and negotiating data processing agreements and privacy provisions in commercial agreements
• Strong working knowledge of U.S. federal and state privacy laws (CCPA/CPRA) and familiarity with GDPR
• Experience advising on data subject rights requests and privacy aspects of websites, digital advertising, and e‑commerce
• Experience supporting cybersecurity incident response and coordinating with information security teams
• Excellent drafting, negotiation and communication skills; ability to work independently and escalate issues
• CIPP/US or CIPP/E preferred; entertainment/media industry experience a plus

Responsibilities

• Draft, review and negotiate data protection/privacy terms in commercial agreements
• Partner with Business & Legal Affairs on privacy issues in artist, vendor, technology, platform, licensing, e‑commerce, and marketing arrangements
• Handle data subject and consumer privacy rights requests; assess scope and compliance, coordinate with privacy operations
• Support privacy aspects of cybersecurity/data security incidents; draft incident communications
• Advise on privacy requirements affecting UMG websites, apps, digital platforms, and marketing activities
• Provide guidance on online advertising, consent management, and tracking technologies
• Advise on compliance with U.S. privacy laws and GDPR; assist with privacy reviews of new initiatives
• Assist with third‑party privacy matters, including vendor diligence and data-transfer requirements
• Maintain privacy policies, templates, and playbooks; improve privacy processes across units
• Collaborate across labels and territories; escalate novel or high-risk issues as needed

Skills

Privacy law

Contract drafting

Negotiation

Data subject rights

Cybersecurity awareness

Regulatory advising

Communication skills

Legal research

Education

J.D. from an accredited law school

Bar admission in at least one US state

Job description

Universal Music Group in New York is seeking a Director of Privacy & Data Protection to lead global privacy initiatives. The role partners with Legal, Information Security, and business teams to apply privacy law fundamentals to contracts, data processing, and regulatory compliance.

The ideal candidate has a JD, 8+ years of experience, and strong drafting and negotiation skills. You will manage day-to-day privacy matters, respond to data subject requests, and guide programs across labels and