Privacy Paralegal

Hasbro; Boston (MA); On-site; USD 74,000 - 110,000; Full time

Benefits offered by this job

Health & Wellness

Time Off to Recharge

Financial Well-being

Life & Family Support

Volunteer and Community Initiatives

Learning & Development

Exclusive Perks

Job summary

Hasbro’s Global Privacy team seeks a hands-on Privacy Paralegal to own day-to-day operations and be the primary contact for internal teams on privacy matters. You will develop processes to support a large company and work onsite with various groups to ensure compliant data handling across sites and products.

The role requires 3+ years in privacy or data protection, a college degree or equivalent, and a paralegal certificate is a plus.

Qualifications

• College degree or equivalent experience; paralegal certificate a plus.
• At least 3 years supporting a legal or compliance function, ideally in privacy or data protection.
• Solid understanding of US state privacy laws, GDPR, and COPPA.
• Experience with privacy management platforms such as Ketch or OneTrust.

Responsibilities

• Build and refine how privacy incidents and inquiries get reported, sorted, and prioritized as the first point of contact.
• Coordinate with Legal, Marketing, Central Technology, and Privacy Operations on technology compliance and data collection classifications.
• Maintain data maps and records of processing activities; manage consent tooling and intake workflows as products evolve.
• Collaborate with engineering and marketing tech teams to learn data movement and implement consent and data collection requirements.
• Coordinate privacy reviews for new products, features, and vendors; assemble technical details for attorneys.
• Help draft privacy notices and policies with attorneys as regulations change.
• Represent the privacy group to Product Development and engineering; integrate compliance early into workflows.
• Write playbooks, templates, and SOPs; supervise the program budget and invoicing.
• Plan Global Data Privacy Day and other privacy awareness activities.
• Support audit responses by prioritizing SharePoint documentation for detailed inquiries.
• Answer privacy questions from other departments and translate legal requirements into actionable guidance.

Skills

Privacy knowledge

Data mapping

Policy drafting

Cross-functional collaboration

Education

College degree

Paralegal certificate

Tools

Ketch/OneTrust

Jira

SharePoint

MS Teams

Excel

Job description

We take play seriously. We’re looking for curious adventurers ready to find their party, fueled by imagination and drive to build what’s never been built before. At Hasbro and Wizards of the Coast, you’ll collaborate with passionate teams to reimagine our iconic brands and create experiences that spark joy, connection, and community through the magic of play. This is your chance to shape legendary play that lasts a lifetime.

Ever wonder who makes sure a Magic: The Gathering account signup, a Nerf promotion, and a Hasbro Pulse pre-order all handle a player's data the right way? That's this team — and this role is at the center of it!

Hasbro's Global Privacy team supports the whole company! We make sure our games, websites, and products handle the personal data of players, employees, and fans responsibly, wherever they are. We're hiring a Privacy Paralegal to own the day-to-day operations of that program.

This is a hands-on role with a lot of ownership. You will be the primary contact for most internal teams when they have privacy questions. You will develop processes that help a small team support a large company.

Effective from the date that Hasbro opens its new Boston location, this position will be onsite Tuesday – Thursday at Hasbro’s new HQ location in Boston, MA. In the interim, this position will be onsite Tuesday –Thursday at Hasbro’s HQ in Pawtucket, RI or at Hasbro’s temporary location in Boston, MA.

What You Will Do as a Privacy Paralegal:

• Build and refine how privacy incidents and inquiries get reported, sorted, and prioritized and be the first point of contact for the rest of the business.
• Work with Legal, Marketing, Central Technology, and Privacy Operations on technology compliance. This includes consistent classification of data collection purposes across many sites and products.
• Collaborate with Privacy Operations to maintain up-to-date data maps and records of processing activities, and to handle the privacy tech stack — including consent tooling, request workflows, and assessment intake — as products, vendors, and teams evolve.
• Sit down with engineering, web development, and marketing technology teams to learn how data moves through our sites and apps. This includes tag managers, SDKs, APIs, and backend systems. Work with them to implement consent, preference, and data collection requirements as the law requires.
• Coordinate privacy reviews for new products, features, and vendors. Assemble the technical details attorneys need to assess risk. Keep the review moving across teams and follow it through to a decision people can build against.
• Help build our privacy notices and policies, working with attorneys on language and positioning as regulations change.
• Represent the privacy group as the main liaison to Product Development and engineering. Help integrate compliance requirements into website and platform workflows early, not late.
• Write the playbooks, templates, and standard operating procedures that keep the program running.
• Supervise the privacy program's budget and handle its invoicing.
• Plan Global Data Privacy Day and other company-wide privacy awareness efforts.
• Prioritize the privacy team's SharePoint documentation to enable a detailed response to an audit request.
• Answer privacy questions from other departments, subsidiaries, and affiliates, and turn legal requirements into practical direction people can actually act on.

What You Will Bring:

• College degree or equivalent experience; paralegal certificate a plus.
• At least 3 years supporting a legal or compliance function, ideally in privacy or data protection.
• Solid understanding of US state privacy laws, GDPR, and children’s privacy rules (COPPA).
• Experience with a privacy management platform such as Ketch or OneTrust.
• Experience working shoulder to shoulder with technical teams — you can join a working session with engineers and leave with requirements that both sides understand the same way.
• Word, Excel, PowerPoint, SharePoint, MS Teams, and Jira.
• Knowledge of functions linked to privacy management: handling privacy tools, conducting data mapping, and documenting processing activities.
• Willingness to work with colleagues and collaborators in other time zones, and in different business units.
• Comfortable with technical details about how data is collected, sent, and stored across websites, mobile apps, APIs, SDKs, databases, and tag managers. This allows translating a legal requirement into something an engineer can build.

Nice to Have:

• CIPP certification (CIPP/US, CIPP/E, or similar).
• Experience with cookie and tracking consent management, and website compliance reviews.
• Drafting experience with Data Processing Agreements (DPA).

The pay transparency range for this role is listed below. The hiring range will vary based on factors such as experience, skills, location and market conditions. Additionally, employees may be eligible for annual and long-term incentives as part of their overall compensation package.

Pay Range

$73,600 — $110,400 USD

Employees may be eligible for annual and long-term incentives as part of their overall compensation package, depending on role, location, and eligibility. Benefits and programs may include:

• Health & Wellness
• Time Off to Recharge
• Financial Well-being
• Life & Family Support
• Volunteer and Community Initiatives
• Learning & Development
• Exclusive Perks

Please review our Applicant Privacy Notice to learn how we collect, use, and protect your personal information in connection with the application process.