Counsel, Privacy, AI & Data Responsibility

Our Purpose

Mastercard powers economies and empowers people in 200+ countries and territories worldwide. Together with our customers, we’re helping build a sustainable economy where everyone can prosper. We support a wide range of digital payments choices, making transactions secure, simple, smart and accessible. Our technology and innovation, partnerships and networks combine to deliver a unique set of products and services that help people, businesses and governments realize their greatest potential.

Title and Summary

Counsel, Privacy, AI & Data Responsibility

Overview

• The Privacy, AI and Data Responsibility (PAIR) team is looking for a Counsel established in the Europe Middle East Africa region (EEMEA) region to support the Consumer Acquisition & Engagement (CA&E) business, including a personalization platform and decision engine.
• The ideal candidate will have the ability to think and act strategically with respect to the needs of business clients and passionate about privacy and AI, highly motivated, intellectually curious, analytical, and possesses a collaborative mindset.
• The position reports to the Senior Counsel, Privacy, AI & Data Responsibility, and serves as a member of both the PAIR and the broader Chief Administration Office (CAO) organization.

Role

• Support business and legal stakeholders in conducting Privacy by Design reviews for CA&E products and services, including a personalization platform and decision engine.
• Support synergies between CA&E products and other Mastercard services while: (i) ensuring compliance with corporate standards and privacy and data protection laws including GDPR, GLBA, HIPAA and CCPA, (ii) coordinating with regional counsel to ensure compliance with other laws and (iii) engaging with outside counsel when needed.
• Ensure compliance with global and regional privacy and data protection laws while enabling data-driven innovation, with a particular focus on supporting the Services/CA&E organization within Mastercard.
• Identify business requirements resulting from new and evolving privacy laws and regulations and provide guidance and thought leadership on topics relevant to the Services organization, including but not limited to data anonymization, cookie regulations and artificial intelligence.
• Draft and negotiate data processing terms and agreements with vendors and customers, including in relation to international data transfers, consent and notice representations and other liabilities.
• Review privacy policies and documentation practices, and overall data practices.
• Identify business requirements resulting from new and evolving privacy laws and regulations and provide guidance and thought leadership on topics relevant to the Services organization, including but not limited to cookie regulations and artificial intelligence.
• Educate the business on legal developments and controls for the further development of products and services within the Services organization.
• Document and update a range of stakeholders including executives on identified privacy compliance gaps and recommended remedial measures.

All About You

• JD from an accredited law school and admitted to at least one bar in the EEMEA region.
• Demonstrated experience and technical familiarity with data analytics, computer science, and/or mathematics preferred.
• Expertise in global and regional privacy and data regulatory laws and frameworks and familiarity with the GDPR, GLBA, HIPAA, CCPA and privacy principles that are common across global laws and regulations.
• Demonstrated experience in relevant technologies including data anonymization, cookie regulations and artificial intelligence, and familiarity with ethical frameworks, data governance, and accountability.
• Familiarity with emerging technologies and associated privacy implications.
• Because of the integral nature of data to CA&E’s products and services, demonstrated familiarity with marketing technologies, data flows, and the principles of data analytics is strongly preferred.
• Strong analytic capabilities and written and oral communication skills.
• Exceptional interpersonal skills with proven experience in relationship building and partnering with legal, business, and technical colleagues.
• Ability to motivate and influence highly-skilled professionals to achieve major organizational goals.
• Familiarity with Privacy by Design methodologies.
• Strong writing skills and ability to simplify technical material for other audiences, including business teams, legal departments, and regulators
• Deep understanding of Mastercard products and services, or financial services in general.

Corporate Security Responsibility

All activities involving access to Mastercard assets, information, and networks comes with an inherent risk to the organization and, therefore, it is expected that every person working for, or on behalf of, Mastercard is responsible for information security and must:

• Abide by Mastercard’s security policies and practices;

• Ensure the confidentiality and integrity of the information being accessed;

• Report any suspected information security violation or breach, and

• Complete all periodic mandatory security trainings in accordance with Mastercard’s guidelines.