Global Privacy & Data Protection Director

600 UMG Recordings Inc; Santa Monica (CA); On-site; USD 90,000 - 180,000; Full time

Benefits offered by this job

Medical, dental, and vision coverage

Wellbeing programs and mental health

Paid time off and holidays

Job summary

Universal Music Group is seeking a Director of Privacy & Data Protection in Santa Monica to lead practical, hands-on privacy initiatives. You will draft and negotiate data protection terms, advise on data subject rights requests, and coordinate incident response with security and legal teams across global operations.

The role requires JD with strong privacy experience, deep knowledge of U.S. privacy laws (CCPA/CPRA) and GDPR familiarity, and the ability to manage multiple matters in a

Qualifications

• J.D. with active membership in at least one U.S. state bar.
• 8+ years in privacy, data protection, cybersecurity or related field.
• Experience drafting data processing agreements and privacy provisions.
• Strong knowledge of US privacy laws incl. CCPA/CPRA and GDPR familiarity.

Responsibilities

• Draft, review and negotiate data protection terms in commercial agreements.
• Advise on privacy rights requests and exemptions, coordinating with teams.
• Support incident response, investigations and regulatory notifications.
• Provide guidance on tracking technologies, marketing and data use.
• Collaborate with Legal, Privacy Operations and business units globally.
• Monitor developments in privacy, cybersecurity and consumer protection law.

Skills

Privacy law expertise

Contract negotiation

Communication skills

Analytical thinking

Cross-functional collaboration

Education

J.D. from an accredited law school

Tools

CCPA/CPRA familiarity

GDPR knowledge

Data processing agreements

Breach notification procedures

Job description

Universal Music Group is seeking a Director of Privacy & Data Protection in Santa Monica to lead practical, hands-on privacy initiatives. You will draft and negotiate data protection terms, advise on data subject rights requests, and coordinate incident response with security and legal teams across global operations.

The role requires JD with strong privacy experience, deep knowledge of U.S. privacy laws (CCPA/CPRA) and GDPR familiarity, and the ability to manage multiple matters in a