What are the responsibilities and job description for the Data Privacy Counsel (INDG) position at Bloomberg Industry Group?
Handles corporate, transactional and legal matters, as well as Bloomberg Industry Group’s data privacy and compliance program.
Overview
Bloomberg Industry Group is seeking a Privacy Counsel to play a critical role in the execution and ongoing maturation of its global privacy program. This role is designed for an attorney who is already fluent in operational privacy tasks and relevant privacy laws, including GDPR and CCPA. The individual should also be interested in deepening his/her expertise by contextualizing those tasks within a comprehensive compliance framework.
The individual will be primarily responsible for day-to-day privacy operations and regulatory compliance execution.
Core Responsibilities
Bloomberg Industry Group maintains a continuing policy of non-discrimination in employment. It is Bloomberg Industry Group’s policy to provide equal opportunity and access for all persons, and the Company is committed to attracting, retaining, developing, and promoting the most qualified individuals without regard to age, ancestry, color, gender identity or expression, genetic predisposition or carrier status, marital status, national or ethnic origin, race, religion or belief, sex, sexual orientation, sexual and other reproductive health decisions, parental or caring status, physical or mental disability, pregnancy or maternity/parental leave, protected veteran status, status as a victim of domestic violence, or any other classification protected by applicable law (“Protected Characteristic”). Bloomberg prohibits treating applicants or employees less favorably in connection with the terms and conditions of employment, in all phases of the employment process, because of one or more Protected Characteristics (“Discrimination”).
Overview
Bloomberg Industry Group is seeking a Privacy Counsel to play a critical role in the execution and ongoing maturation of its global privacy program. This role is designed for an attorney who is already fluent in operational privacy tasks and relevant privacy laws, including GDPR and CCPA. The individual should also be interested in deepening his/her expertise by contextualizing those tasks within a comprehensive compliance framework.
The individual will be primarily responsible for day-to-day privacy operations and regulatory compliance execution.
Core Responsibilities
- Updating Records of Processing Activities (ROPA): Maintain existing ROPA (and adding new entries) to ensure accuracy & currency.
- Privacy Impact Assessments: Conduct DPIAs, LIAs, and TIAs; maintain the assessment register; track mitigations.
- Data Subject Rights: Fulfill DSARs end-to-end, including identity verification, data retrieval, response drafting, and evidence management.
- Data Processing Agreements (DPAs): Draft and negotiate customer and vendor DPAs (as well as contract provisions associated with privacy); escalate complex or high-risk matters.
- Vendor Due Diligence: Conduct privacy due diligence on vendors and manage routine DPAs.
- Incident Response: Execute incident/breach runbooks, including evidence collection, reporting, and customer/vendor communication support.
- Privacy by Design: Participate in Privacy by Design reviews within the SDLC/PLC, documenting advice and risk assessments.
- Training & Awareness: Assist in development and delivery of privacy trainings.
- Regulatory Monitoring: Conduct horizon scanning of evolving privacy laws; distill requirements into actionable obligations and communicate them to control owners.
- Familiarity with AI-related regulations (e.g., EU AI Act, emerging U.S. frameworks) and evolving global approaches to data governance.
- Assist with intellectual property, licensing, content, technology, or media matters as bandwidth permits.
- Support pre-litigation privacy or data protection disputes where needed.
- Strong familiarity with relevant privacy laws, including GDPR and CCPA.
- Excellent legal analytical, problem solving, and communication skills.
- Strong organizational skills and ability to manage multiple projects.
- Capacity to prioritize risks and drive execution under tight deadlines.
- Collaborative work style with the ability to influence across functions.
- Hardworking with attention to detail and a proactive, hands-on approach to compliance execution.
- J.D. from an ABA-accredited law school and member of a state bar in good standing.
- Minimum 4–8 years of legal experience, with at least 3 years focused on data privacy.
- Demonstrated experience in operational privacy tasks (ROPA, DPIAs/LIAs/TIAs, DSARs, vendor/customer DPAs).
- CIPP/E or CIPP/US certification highly desired; candidates with both are strongly preferred.
Bloomberg Industry Group maintains a continuing policy of non-discrimination in employment. It is Bloomberg Industry Group’s policy to provide equal opportunity and access for all persons, and the Company is committed to attracting, retaining, developing, and promoting the most qualified individuals without regard to age, ancestry, color, gender identity or expression, genetic predisposition or carrier status, marital status, national or ethnic origin, race, religion or belief, sex, sexual orientation, sexual and other reproductive health decisions, parental or caring status, physical or mental disability, pregnancy or maternity/parental leave, protected veteran status, status as a victim of domestic violence, or any other classification protected by applicable law (“Protected Characteristic”). Bloomberg prohibits treating applicants or employees less favorably in connection with the terms and conditions of employment, in all phases of the employment process, because of one or more Protected Characteristics (“Discrimination”).