The role will involve supporting eBay and eBay subsidiary privacy program, and will require significant cross-functional collaboration with product, research, engineering, policy, operations, and business teams, as well as other legal subject matter experts. Efforts will include partnering with eBay’s business, product, and engineering teams to facilitate the exercise of individual privacy rights, advising on organizational controls and processes to help ensure privacy-forward outcomes, and assisting with responses to requests or inquiries from eBay and eBay subsidiaries users and applicable regulators. This is a unique opportunity to join a legal team working on novel issues in an exciting, fast-paced environment.

Duties:

• Build and manage privacy program for eBay subsidiary
• Advise new eBay subsidiary on privacy requirements and support implementation of privacy program
• Perform enterprise privacy assessments, identify gaps, develop remediation plans in implement remediations
• Work cross-functionally with legal, business, product, and engineering teams to support the completion of Privacy Risk Assessments (PIA, DPIA, LIA)
• Implement new privacy laws

• Work with internal and external stakeholders as needed to improve risk assessment questionnaires and processes
• Support the implementation of new laws in the United States, Canada and Latin America
• Collaborate with various departments – IT, Engineering, Product, etc. - to ensure privacy considerations are integrated into product development, data management, and business processes
• Monitor changes in privacy laws, regulations, and standards, and support updating the privacy program as necessary
• Support Business Units (BUs) with timely and effective triaging of incoming data processing agreement (DPA) review requests
• Act as lead point in facilitating, tracking, and enhancing prompt and timely communication with BUs throughout DPA reviews
• Other responsibilities, for eBay and subsidiaries as assigned

Skills:

• JD or foreign equivalent
• Specific experience working and solid knowledge of, privacy laws applicable to businesses in US and Canada: CCPA, CPRA, GDPR, LGPD, PIPEDA, TCPA, CAN-SPAM, as well as other U.S. state and federal privacy and data security and global data protection laws
• Experience giving timely and practical privacy advice in a global organization
• Experience working cross-functionally and partnering with legal, business, information security, human resources, data governance, risk management, and engineering teams
• Ability to support urgent matters and collaborate on time-sensitive matters as needs arise
• Privacy program management experience in large organizations
• Experience with other privacy tools a plus
• Certified International Privacy Professional (CIPP/US and/or CIPM, CIPP/T, or CIPP/E) preferred