Privacy Counsel

Summary of Job Description:

The Privacy Counsel provides professional legal advice and counsel on data privacy, data protection, and information governance matters, supports compliance with applicable privacy laws, and manages privacy risk across the organization. This position advises on privacy aspects of business initiatives and technology implementations, reviews and negotiates data protection terms in vendor and commercial agreements, and leads or supports privacy impact assessments and third-party privacy reviews. The Privacy Counsel reviews and prepares privacy policies, notices, and procedures, drafts legal memoranda and related documents, and supports privacy incident response and compliance initiatives. This position partners with different departments and provides training to business stakeholders on privacy requirements and best practices.

Job Responsibilities:

• Advises on compliance with applicable data privacy and protection laws (e.g., CCPA/CPRA, GDPR, and other U.S. state laws), ensuring alignment with business practices.
• Manages and supports data subject rights requests (DSARs), including review of responses, issuespotting, and process improvements; conduct and review Privacy Impact Assessments (PIAs/DPIAs) for new technologies, vendors, products, and business initiatives.
• Reviews, drafts, and negotiates privacyrelated contractual provisions, including Data Processing Agreements (DPAs) and vendor data protection terms; partner with Procurement, IT, Cybersecurity, and Risk Management to assess and mitigate thirdparty privacy risk.
• Supports the development, maintenance, and implementation of privacy policies, notices, disclosures, and internal processes to ensure accuracy and regulatory compliance.
• Advises on cookie, tracking, and consent management matters in coordination with Marketing and Digital teams.
• Provides guidance on data governance and data lifecycle issues, including data minimization, retention, and deletion.
• Assists with privacy incident and data breach response efforts in coordination with Legal, IT, Cybersecurity, and Risk.
• Monitors evolving privacy laws, regulations, and enforcement trends and assesses potential business impact.
• Supports privacy considerations related to AI, analytics, and other datadriven initiatives.
• Contributes to incident response efforts, including assessing and advising on data breaches or security incidents from a legal and regulatory perspective.
• Delivers clear, timely, and businessoriented privacy advice to stakeholders across the organization.

How we reward you:

• Hybrid remote schedule
• 401K with company match
• Yearly bonus opportunity*
• Full medical, dental, and vision insurance *
• On-site fitness center, biometric screen, and flu shot clinic
• Discounts at Panda restaurants, theme parks, and gym memberships
• Paid time off starting at 15 days with 7 federal holidays*
• Continuous education assistance and scholarships*
• Income protection including Disability, Life and AD&D insurance*
• Bereavement leave*

*Benefits available for eligible permanent full time associates

Your background and experience:

• JD degree and licensed to practice law in California.
• 4+ years of relevant experience
• CIPP/US or similar certification preferred
• Successful completion of initial and periodically required trainings.
• Obtaining a valid Food Handler's Card within 30 days of employment is a requirement of this position.

Pay Range: L2: $136,500-158,000/ Annual

#LI-CC2

#LI-Hybrid

Panda Strong since 1983:

Founded in Glendale, California, we are now the largest family-owned American Chinese Restaurant concept in America. With close to 2,800 locations globally, we continue our mission of delivering exceptional Asian dining experiences by building an organization where people are inspired to better their lives. Whether it's impacting our team or the communities we work in, we're proud to be an organization that embraces family values.

You're wanted here:

Panda Restaurant Group, Inc. is an Equal Opportunity Employer and is committed to providing equal opportunity, and does not discriminate on the basis of any characteristic protected by law, including but not limited to sex/gender (including pregnancy, childbirth, lactation and related conditions), gender expression, race, color, religion, national origin, sexual orientation, gender identity, disability, age, ancestry, medical condition, genetic information, marital status, and veteran status. Additionally, Panda Restaurant Group, Inc. complies with all federal, state, and local laws regarding requests for workplace accommodation.The Americans with Disabilities Act (ADA) prohibits discrimination against qualified individuals on the basis of disability.Applicants are entitled to reasonable accommodations, absent undue hardship, to effectively participate in the application and hiring process, for example, sign language interpreters.If you believe you require an accommodation for the application or interview process or for the position for which you are applying, please reach out View email address on click.appcast.io.