Why Sony Interactive Entertainment?

Sony Interactive Entertainment isn’t just the Best Place to Play — it’s also the Best Place to Work. Sony Interactive Entertainment (SIE) is the company behind the PlayStation brand. As a subsidiary of Sony Group Corporation, we’re part of a proud legacy of innovation and excellence. SIE is a dynamic technology company, delivering cutting-edge hardware and network services to more than 100 million people and an entertainment leader, home to some of the most beloved and recognizable intellectual properties (IP) in the world. Our role at SIE is to create and nurture the experiences under the PlayStation brand, a name synonymous with entertainment excellence and creativity.

Senior Director, Legal - Global Privacy & Data Counsel

San Mateo, CA or London, England | Hybrid - 2+ days per week in your designated office

Full relocation assistance available for qualified candidates

Role Summary

Leading SIE’s Global Legal Privacy program, you will play a pivotal role in shaping and advancing this function, which is central to our mission as a data-driven technology and entertainment company. You will develop, implement, and maintain comprehensive privacy policies, procedures, and practices that reflect industry best practices, comply with applicable data protection laws and regulations, and support SIE’s business objectives. Working collaboratively with teams around the world, you will help embed strong data privacy stewardship across the organization through your leadership, passion, and expertise.

What You’ll Be Doing

Lead the Privacy Team: Lead a team of professionals spanning legal, operations and compliance, and data governance. Provide strong leadership to build a well-functioning team.
Privacy Program Development: Design, implement, and evolve a robust and forward-thinking privacy program tailored to the specific needs of SIE’s multi-faceted, data-driven business. Provide senior leadership in communicating company's vision, strategy, and objectives for data privacy and data husbandry to stakeholders across SIE.
Regulatory Compliance: Stay up to date with evolving global privacy laws and regulations, including GDPR, CCPA, and other regional data protection requirements. Ensure the company's policies and practices remain compliant with the changing legal landscape.
Privacy by Design: Advocate privacy-by-design principles and ensure that privacy considerations are integrated into the development of new products, services, and technologies, working closely with product counselors, product managers, business function leaders and SIE’s ESG team.
Privacy Policies and Procedures: Create and review privacy policies, notices, consent forms, and related documentation to ensure transparency and compliance with relevant data protection laws. Collaborate with Legal, Compliance, and other teams to disseminate these policies throughout the organization and to customers.
Employee Training and Awareness: Conduct privacy training programs for employees and management to promote a privacy-aware culture. Foster awareness of privacy responsibilities and best practices throughout the organization.
Vendor Management: Develop and evolve SIE’s processes to assess the privacy practices of vendors and third-party partners to ensure that data processing agreements and contracts comply with privacy and SIE’s Information Security requirements.
Privacy Impact Assessments: Oversee the conduct of privacy impact assessments (PIAs) to identify and mitigate privacy risks associated with the company's data processing activities.
Incident Response: Develop and maintain an effective incident response plan for privacy breaches. Coordinate with the Incident Response team to manage and mitigate privacy incidents and associated risks.
Reporting and Accountability: Provide regular reports on the status of the privacy program to executive leadership and the board of directors. Be a focal point of contact for privacy-related inquiries from regulators and customers.