Director, Privacy and Data Protection

Universal Music Group, Inc.

. Draft, review, and negotiate data protection and privacy terms in commercial agreements .

Posted 10/28/2026full-timeNew York City • New York • United StatesLead💰 $89,700 - $180,000 per yearWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates expertise in drafting and negotiating data protection agreements, advising on U.S. federal and state privacy laws, and managing privacy-related legal issues across various commercial arrangements. Proficient in providing guidance on cybersecurity incidents and consumer privacy rights while collaborating effectively with legal and business teams.

Highest-signal resume keywords

J.D. From An Accredited Law School8+ Years Of Relevant Legal ExperienceStrong Knowledge Of U.S. Federal And State Privacy LawsExperience Drafting Data Processing AgreementsCIPP/US Or CIPP/E Certification Preferred

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

Data ProtectionPrivacy LawCybersecurityLegal ResearchDrafting AgreementsNegotiation SkillsPrivacy Impact AssessmentsConsumer Privacy RightsData Security Incident ResponseRegulatory Compliance

Soft Skills

Strong Organizational SkillsExcellent Communication SkillsAnalytical SkillsSound JudgmentCollaboration Skills

Certifications & Qualifications

CIPP/USCIPP/E

Industry Keywords

EntertainmentDigital MediaE-CommerceAdvertisingConsumer ProtectionData-Intensive IndustryTechnology TransactionsOnline Tracking TechnologiesMarketing CommunicationsGDPR

Tech Stack

Tools & technologies

Cyber Security

About the role

Key responsibilities & impact

Draft, review, and negotiate data protection and privacy terms in commercial agreements
Partner with Business & Legal Affairs teams on privacy issues in artist, vendor, technology, platform, licensing, e-commerce, marketing, and other commercial arrangements
Handle day-to-day legal work relating to data subject and consumer privacy rights requests
Support privacy-law aspects of cybersecurity and data security incidents
Assist with investigations of potential privacy and data security issues
Advise on privacy requirements affecting websites, applications, digital platforms, artist and fan experiences, e-commerce, advertising, and marketing
Provide guidance on online advertising, tracking technologies, marketing communications, consent, preference management, and consumer protection requirements
Advise on U.S. federal and state privacy laws, GDPR, and international privacy requirements
Support privacy reviews of initiatives, technologies, vendors, products, and data uses, including privacy impact assessments
Assist with vendor diligence, data-transfer requirements, privacy questionnaires, and remediation
Maintain and improve privacy policies, procedures, templates, playbooks, and other resources
Improve processes for contract review, rights requests, incident response, and recurring privacy matters
Support responses to regulatory inquiries and audits
Monitor legal developments and provide practical guidance
Provide privacy guidance and training to Legal, business, and operational teams
Support privacy issues involving emerging technologies and new uses of data
Collaborate across UMG labels, business units, and territories, independently handling routine and moderately complex matters and escalating significant issues

Requirements

What you’ll need

J.D. from an accredited law school
Active membership in good standing in at least one U.S. state bar
8+ years of relevant legal experience, with substantial experience in privacy, data protection, cybersecurity, technology transactions, or a closely related field
Experience drafting and negotiating data processing agreements and privacy, data use, and security provisions in commercial agreements
Strong working knowledge of U.S. federal and state privacy laws, including CCPA/CPRA and other comprehensive state privacy laws
Meaningful familiarity with GDPR and international data protection requirements
Experience advising on data subject and consumer privacy rights requests, including access, deletion, correction, and related requests
Experience advising on privacy issues involving websites, digital advertising, online tracking technologies, e-commerce, marketing, and consumer-facing data practices
Familiarity with consumer protection and marketing requirements relevant to digital and direct-to-consumer activities
Meaningful experience supporting cybersecurity or data security incident response, including breach-notification requirements and working with information security or technical teams
Strong legal research, analytical, drafting, and negotiation skills
Ability to understand technical and operational facts and identify relevant privacy, cybersecurity, and digital marketing legal issues
Sound judgment and ability to handle significant volume independently while recognizing when escalation is warranted
Strong organizational skills and ability to manage multiple matters and competing priorities
Excellent communication and collaboration skills, including explaining complex requirements to lawyers and non-lawyers
CIPP/US, CIPP/E, or another relevant privacy certification preferred
Experience in entertainment, music, digital media, technology, e-commerce, advertising, or another consumer-facing and data-intensive industry is a plus

Benefits

Comp & perks

Comprehensive medical, dental, and vision coverage
100% coverage for out-patient in-network mental health services
Fertility coverage for eligible medical plan participants
Wellbeing reimbursements for fitness classes, spa treatments, meal services, travel, and more (up to $720/year)
Student Loan Repayment Assistance and Tuition Reimbursement
401(k) with 100% immediate vesting on the first 5% of contributions, plus an additional UMG contribution
Flexible Paid Time Off (PTO) for exempt employees
3-weeks PTO for non-exempt employees
2-weeks paid Winter Break
10 Company Holidays, including Juneteenth and Wellbeing Day
Summer Fridays between Memorial Day and Labor Day
Generous paid parental leave for every type of parent