Provide legal review, guidance and support on privacy, data protection and security matters across The Kroger Co. and its affiliated companies. Partner cross-functionally with the business, including IT, sourcing, product development, engineering, information security, and our other Company attorneys to inform, influence and advise on data uses and privacy strategies while managing legal risk and ensuring regulatory compliance involving use of personal information. Must have a strong foundation in drafting and negotiating complex contracts and in-depth knowledge and expertise on data privacy and security laws. Provide legal review, guidance and support on privacy, data protection and security matters across The Kroger Co. and its affiliated companies. Partner cross-functionally with the business, including IT, sourcing, product development, engineering, information security, and our other Company attorneys to inform, influence and advise on data uses and privacy strategies while managing legal risk and ensuring regulatory compliance involving use of personal information. Must have a strong foundation in drafting and negotiating complex contracts and in-depth knowledge and expertise on data privacy and security laws. Demonstrate the company’s core values of respect, honesty, integrity, diversity, inclusion, and safety.
- Draft, review and negotiate data protection addendums and other data-related agreements for wide-ranging business initiatives, including with vendors, clients, and business partners
- Negotiate a wide range of complex commercial transactions involving consumer data, including technology, marketing, and license agreements
- Provide pragmatic privacy and data security subject matter expertise, guidance and advise on compliance with all applicable laws, rules and regulations
- Partner with our Privacy Office to support, enhance, scale and run Kroger’s existing privacy program, including privacy operations and documentation; employee training; policy enforcement, and monitoring and auditing
- Collaborate with compliance, information security and other stakeholders to perform privacy assessments
- Proactively monitor and remain up to date on relevant consumer protection, privacy and data security laws and regulations, enforcement actions, technological developments, threat vectors, industry and regulatory trends and topics, and evolving industry standards and best practices
- Work with privacy legal team members to maintain, update, and draft contract templates and playbooks
- Provide legal support for security incident response activities
- Must be able to perform the essential job functions of this position with or without reasonable accommodation
