Privacy Paralegal

Wetake play seriously. Were looking for curious adventurers ready to find their party fueled by imaginationand driveto build whats never been built before. At Hasbro and Wizards of the Coast youll collaborate with passionate teams to reimagine our iconic brands and create experiences that spark joy connection and community through the magic of play. This is your chance to shape legendary play that lasts a lifetime.

Ever wonder who makes sure a Magic: The Gathering account signup a Nerf promotion and a Hasbro Pulse pre-order all handle a players data the right way Thats this team and this role is at the center of it!

Hasbros Global Privacy team supports the whole company! We make sure our games websites and products handle the personal data of players employees and fans responsibly wherever they are. Were hiring a Privacy Paralegal to own the day-to-day operations of that program.

This is a hands-on role with a lot of ownership. You will be the primary contact for most internal teams when they have privacy questions. You will develop processes that help a small team support a large company.

Effective from the date that Hasbro opens its new Boston location this position will be onsite Tuesday Thursday at Hasbros new HQ location in Boston the interim this position will be onsite Tuesday Thursday at Hasbros HQ in Pawtucket RI or at Hasbros temporary location in Boston MA.

What You Will Do as a Privacy Paralegal:

• Build and refine how privacy incidents and inquiries get reported sorted and prioritized and be the first point of contact for the rest of the business.
• Work with Legal Marketing Central Technology and Privacy Operations on technology compliance. This includes consistent classification of data collection purposes across many sites and products.
• Collaborate with Privacy Operations to maintain up-to-date data maps and records of processing activities and to handle the privacy tech stack including consent tooling request workflows and assessment intake as products vendors and teams evolve.
• Sit down with engineering web development and marketing technology teams to learn how data moves through our sites and apps. This includes tag managers SDKs APIs and backend systems. Work with them to implement consent preference and data collection requirements as the law requires.
• Coordinate privacy reviews for new products features and vendors. Assemble the technical details attorneys need to assess risk. Keep the review moving across teams and follow it through to a decision people can build against.
• Help build our privacy notices and policies working with attorneys on language and positioning as regulations change.
• Represent the privacy group as the main liaison to Product Development and engineering. Help integrate compliance requirements into website and platform workflows early not late.
• Write the playbooks templates and standard operating procedures that keep the program running.
• Supervise the privacy programs budget and handle its invoicing.
• Plan Global Data Privacy Day and other company-wide privacy awareness efforts.
• Prioritize the privacy teams SharePoint documentation to enable a detailed response to an audit request.
• Answer privacy questions from other departments subsidiaries and affiliates and turn legal requirements into practical direction people can actually act on.

What You Will Bring:

• College degree or equivalent experience; paralegal certificate a plus.
• At least 3 years supporting a legal or compliance function ideally in privacy or data protection.
• Solid understanding of US state privacy laws GDPR and childrens privacy rules (COPPA).
• Experience with a privacy management platform such as Ketch or OneTrust.
• Experience working shoulder to shoulder with technical teams you can join a working session with engineers and leave with requirements that both sides understand the same way.
• Word Excel PowerPoint SharePoint MS Teams and Jira.
• Knowledge of functions linked to privacy management: handling privacy tools conducting data mapping and documenting processing activities.
• Willingness to work with colleagues and collaborators in other time zones and in different business units.
• Comfortable with technical details about how data is collected sent and stored across websites mobile apps APIs SDKs databases and tag managers. This allows translating a legal requirement into something an engineer can build.

Nice to Have:

• CIPP certification (CIPP/US CIPP/E or similar).
• Experience with cookie and tracking consent management and website compliance reviews.
• Drafting experience with Data Processing Agreements (DPA).

Employees may be eligible for annual and long-term incentives as part of their overall compensation package depending on role location and eligibility. Benefits and programs may include:

• Health & Wellness
• Time Off to Recharge
• Financial Well-being
• Life & Family Support
• Volunteer and Community Initiatives
• Learning & Development
• Exclusive Perks

Please review our Applicant Privacy Notice to learn how we collect use and protect your personal information in connection with the application process.