lululemon

lululemon is an innovative performance apparel company for yoga, running, training, and other athletic pursuits. Setting the bar in technical fabrics and functional design, we create transformational products and experiences that support people in moving, growing, connecting, and being well. We owe our success to our innovative product, emphasis on stores, commitment to our people, and the incredible connections we make in every community we're in. As a company, we focus on creating positive change to build a healthier, thriving future. In particular, that includes creating an equitable, inclusive and growth-focused environment for our people. 

About This Team 

We are self-described “legal outliers.” Our vision is to inspire and educate, provide value from beginning to end, and create an environment where work enriches life, and life enriches work. We believe in “the sweat life” - sweat, relationships, and personal development - and we live it every day. 

A Day In The Life 

We’re looking for an experienced Senior Privacy Counsel to join our dynamic legal team. In this role, you’ll serve as a subject matter expert (SME) in privacy law, providing expert legal counsel across a range of privacy-related issues and initiatives. You’ll independently navigate complex and evolving global privacy requirements, delivering tactical, risk-based guidance that helps teams stay on track despite ambiguity or rapidly changing regulations. 

You will partner closely with business and cybersecurity teams to ensure that all privacy requirements are effectively integrated into new products, initiatives, and technologies. A key part of this role is advising cross-functional teams to mitigate risk and ensuring privacy compliance is achieved efficiently. 

You’ll be responsible for staying ahead of changing privacy laws and regulations and will deliver guidance to help teams quickly adapt to new requirements. You’ll escalate privacy risks as necessary, ensuring that leadership is informed and can act quickly to manage potential issues. In addition to handling legal issues directly, you’ll collaborate with external counsel when needed, manage incidents, and play a central role in the ongoing development and execution of the company’s Privacy Program. 

Responsibilities 

• Provide independent, expert legal counsel on a wide range of privacy-related issues, offering tactical risk-based guidance on complex matters across product development, marketing, and technology teams. 
• Collaborate with business and cybersecurity teams to ensure comprehensive compliance with global privacy laws (e.g., CCPA, GDPR, PIPEDA, etc.) and integrate these requirements into new product features and digital initiatives. 
• Stay current with evolving privacy laws, emerging case law, and regulatory changes, delivering practical and timely guidance to internal stakeholders to navigate ambiguity or rapidly changing requirements. 
• Act as a trusted partner to the organization, advising on high-impact decisions that require balancing legal and business needs, and escalating privacy risks to leadership when necessary. 
• Provide expert counsel on privacy incidents, data subject access requests (DSARs), and regulatory inquiries, including engaging external counsel and coordinating responses. 
• Lead and support Privacy by Design initiatives, working closely with product and technology teams to ensure privacy considerations are embedded in product development and lifecycle management. 
• Manage privacy-related projects, monitor program compliance, track incidents, and ensure alignment with global privacy laws and regulations. 
• Mentor and guide junior legal team members and contribute to a deep partnership with other teams across the organization, ensuring consistent privacy support and alignment. 
• Maintain and update privacy policies, procedures, and notices, ensuring they are in line with evolving legal requirements and organizational practices. 

Required Skills and Experience 

• At least 5 years of experience as a practicing attorney, preferably in-house or at a law firm, with a focus on privacy law, data protection, or related legal fields. 
• Deep knowledge of global privacy laws (e.g., GDPR, CCPA, PIPEDA, CAN-SPAM, COPPA, FTC rules, etc.) and the ability to translate complex legal concepts into actionable, business-oriented advice. 
• Experience partnering with business, technology, and cybersecurity teams to integrate privacy requirements into projects and products effectively. 
• Strong communication and problem-solving skills, with the ability to advise technical and non-technical teams on complex privacy issues and help navigate rapidly changing privacy requirements. 
• Ability to manage privacy risks, make independent decisions, and escalate issues when necessary to leadership in a fast-paced, dynamic environment. 
• Solid understanding of digital technologies (social media, digital advertising, mobile apps, mobile payments) and their impact on privacy. 
• Proven ability to lead privacy projects, handle incidents, and ensure the ongoing maturity and success of a Privacy Program. 
• J.D. from an accredited institution and licensed to practice in Washington State / British Columbia (or ability to practice in-house). 
• Certifications such as CIPP, CIPM preferred.