Senior Privacy Counsel

who we are

lululemon is an innovative performance apparel company for yoga, running, training, and other athletic pursuits. Setting the bar in technical fabrics and functional design, we create transformational products and experiences that support people in moving, growing, connecting, and being well. We owe our success to our innovative product, emphasis on stores, commitment to our people, and the incredible connections we make in every community we're in. As a company, we focus on creating positive change to build a healthier, thriving future. In particular, that includes creating an equitable, inclusive and growth-focused environment for our people.

about this team

We are self-described “legal outliers." Our vision is to inspire and educate, provide value from beginning to end and create an environment where work enriches life, and life enriches work. We believe in movement, relationships and personal development - and we live it every day.

Job Mandate

The Senior Privacy Counsel role requires extensive expertise and significant depth of knowledge and skill with respect to legal issues. This role works independently to provide guidance to business and legal leaders on a wide range of complex and escalated situations and requires keeping current with best practices, multi-jurisdictional legislative changes, and emerging case law regarding data privacy.

This role is key to providing privacy product counsel to the Technology, Digital, Asset Protection, and other key stakeholder partners in how we create and roll out new features and offers. In addition to being the primary SME supporting our APAC regional partners, the Senior Privacy Counsel is also responsible for educating Legal Team Members (including leadership) and cross-functional partners about changes in global privacy laws and regulations, as well as our ability to comply with such changes, applying it to the lens of our business. Ultimately, this role will be able to digest the complex and nuance changes in privacy legislation and communicate it simply with our stakeholders.

The Senior Privacy Counsel is responsible for responding to, managing, and providing expert advice during incidents - including management of outside counsel and updates to senior leadership.

responsibilities:

• Day to day legal direction on complex global privacy laws and regulations with diverse business stakeholders.
• Provide direction to teams during incidents, engagement of outside counsel, and generating clear guidance to both business and legal leaders.
• Ability to provide tactical risk-based guidance that balances business objectives, company values, and shifting compliance requirements.
• Provide direction on Organizational and Departmental strategy to create appropriate implementation strategies and effectively advise cross-functional partners.
• Partners closely with the Cybersecurity team, revising existing policies, procedures, and continued counsel.
• Completes complex risk assessments on critical business initiatives with consistently clear guidance to business stakeholders.
• Provides direction to cross-functional partners on external vendor relationships and business goals, as well as quickly collecting input from key departments to apply policies and minimize risk, including Insurance, Finance, and Information Security.
• Identifies legal issues, analyzes risks, and creates and implements solutions structured to achieve business objectives efficiently with rationalized legal and practical risk. This role also engages directly with external counsel on incidents, data subject access requests and new legislation.
• Collaborates with the rest of the Privacy team on compliance execution, matter and regulatory tracking, program maturity projects, and reporting to leadership.
• Provides clear counsel on legal matters to all levels within the organization, working independently and representing the Privacy team on complex privacy issues.

qualifications:

• Excellent organizational and communication skills, and the ability to communicate privacy and legal concepts to technical and non-technical audiences.
• Ability to thrive in a fast-paced, dynamic, sometimes ambiguous environment.
• Experience navigating both NAM & APAC data privacy requirements and advising regional business teams.
• Possess sound legal and business judgement and flexibility/adaptability to manage multiple wide-ranging matters, conflicting deadlines, and new areas of expertise as business needs change.
• Excellent problem identification, problem solving, and analytical skills.
• Ability to establish cross-functional, collaborative relationships with business and technology partners.
• Exceptional communication skills to advise stakeholders across the business on complex legal concepts.
• Ability to negotiate with and influence key stakeholders internally.
• Certifications such as CIPP, CIPM preferred.
• Admission into the bar of Practice or the ability to register as in-house counsel.
• 7+ years of privacy legal experience. Prior in-house experience preferred and/or experience in the retail sector. Licensed to practice in Vancouver B.C., Washington state, or ability to practice in house.
• Understanding of key global privacy and marketing compliance laws including CCPA/CPRA, PIPEDA, GDPR, regional data breach regulations, CAN-SPAM, COPPA, CASL, APAC regional laws, etc. Knowledge of common privacy laws, practices, and regulatory frameworks (PCI, NIST, SOX, etc.), as well as a general understanding of various retail technologies, information security, and risk management standards. Strong knowledge in digital technologies (i.e., social media, digital advertising, mobile apps, mobile payments), with particular focus on how these technologies are used to collect, use and/or share information.

must haves

• Acknowledge the presence of choice in every moment and take personal responsibility for your life.
• Possess an entrepreneurial spirit and continuously innovate to achieve great results.
• Communicate with honesty and kindness and create the space for others to do the same.
• Lead with courage, knowing the possibility of greatness is bigger than the fear of failure.
• Foster connection by putting people first and building trusting relationships.
• Integrate fun and joy as a way of being and working, aka doesn’t take yourself too seriously

additional notes

Authorization to work in Canada is required for this role.

compensation and benefits package

lululemon’s compensation offerings are grounded in a pay-for-performance philosophy that recognizes exceptional individual and team performance. The typical hiring range for this position is from $168,00 - 220,500 annually; the base pay offered is based on market location and may vary depending on job-related knowledge, skills, experience, and internal equity. As part of our total rewards offering, permanent employees in this position may be eligible for our competitive annual bonus program, subject to program eligibility requirements.

At lululemon, investing in our people is a top priority. We believe that when life works, work works. We strive to be the place where inclusive leaders come to develop and enable all to be well. Recognizing our teams for their performance and dedication, other components of our total rewards offerings include support of career development, wellbeing, and personal growth:

• Extended health and dental benefits, and mental health plans
• Paid time off
• Savings and retirement plan matching
• Generous employee discount
• Fitness & yoga classes
• Parenthood top-up
• Extensive catalog of development course offerings
• People networks, mentorship programs, and leadership series (to name a few)

Note: The incentive programs, benefits, and perks have certain eligibility requirements. The Company reserves the right to alter these incentive programs, benefits, and perks in whole or in part at any time without advance notice.

workplace arrangement

Hybrid

In-person collaboration and connection is important to our culture. Work is performed onsite, minimum 4 days per week.

#LI-Onsite

#LI-MF