Privacy & Regulatory Attorney

Job Description

Job Description

JOB DESCRIPTION SUMMARY:

Pizza Hut Global has an immediate need for a Privacy & Regulatory Attorney who has a passion for pizza and privacy. The Privacy & Regulatory Attorney will serve a key role within the Pizza Hut Global Legal Department and will work with cross-functional partners to address privacy, regulatory, and data governance-related risks and compliance. The Privacy & Regulatory Attorney will be responsible for creating and revising enterprise-wide processes to address global privacy laws, including the EU/UK General Data Protection Regulation (GDPR), the California Consumer Privacy Act (CCPA), and Canadian privacy regulations(PIPEDA and Quebec’s Law 25). The successful candidate will have a growth mindset and a passion for providing world-class legal support by collaboratively working across business units while consistently modeling Pizza Hut’s culture.

RESPONSIBILITIES:

• Provide legal guidance on global privacy and data protection requirements, including compliance with the EU/UK GDPR, CCPA, PIPEDA, Quebec’s Law 25, and other key global privacy regulatory frameworks.
• Advise inprivacy program development, including implementing policies and procedures.
• Partner with IT, marketing, digital, and security teams on data governance, cybersecurity matters, and AI.
• Support privacy reviews related to digital platforms, mobile apps, loyalty programs, and marketing technology.
• Monitor global regulatory developments andadvisethe business on evolving privacy risks and obligations.
• Evaluate legal risksregardingcustomer accounts, engagement, messaging, data retention, and data deletion tofacilitatebusinessobjectiveswhile maintaining customer data privacy and legal compliance. 
• Supportlitigationteam on privacy matters.

REQUIRED QUALIFICATIONS:

• Juris Doctor (JD) degree from an ABA accredited law school.
• Active bar membership in good standing.
• 3-5+ years of legal experience, including either law firm or relevant in-house experience.
• 3-5+ years of experience supporting corporate privacy functions.
• In-depth knowledge of andproficiencyin privacy and data protection frameworks, including the GDPR, PIPEDA, Quebec’s Law 25, and CCPA.
• Experience working with international teams and multi-jurisdictional legal issues.

PREFERRED QUALIFICATIONS:

• Experience supporting consumer brands, franchised systems, or global retail/QSR organizations.
• Familiarity with AI, digital commerce, and marketing technology ecosystems.
• Familiarity with children’s privacy regulations, especially in the U.S.

KEY COMPETENCIES:

• Strong business judgment and pragmatic problem-solving
• Ability tooperatein a fast-paced, matrixed global environment
• Excellent communication and stakeholder management skills
• Strategic thinking with strong attention to detail
• Ability to balance risk management with business enablement

The posted salary range is the expected salary range for this position. Ultimately, in determining pay, we'll consider the successful candidate’s location, experience, and other job-related factors.