Description:
At T. Rowe Price, we identify and actively invest in opportunities to help people thrive in an evolving world. As a premier global asset management organization with more than 85 years of experience, we provide investment solutions and a broad range of equity, fixed income, and multi-asset capabilities to individuals, advisors, institutions, and retirement plan sponsors. We take an active, independent approach to investing, offering our dynamic perspective and meaningful partnership so our clients can feel more confident.We believe doing the right thing for our clients and our associates is good business. With a career at the firm, you can expect opportunities to create real impact at work and in your community. You'll enjoy resources to support your career path, as well as compensation, benefits, and flexibility to enrich your life. Here, you'll find a collaborative culture that respects and values differences and colleagues who share a spirit of generosity.
Join us for the opportunity to grow and make a difference in ways that matter to you.
Role Summary:
Join our team as a Managing Legal Counsel – Privacy and play a pivotal role in the future of T. Rowe Price, all while developing your expertise in a dynamic and supportive environment. This is an opportunity to join a global AI, IP & Data Privacy legal team, with a focus on data privacy that tackles some of the most cutting-edge issues and complex questions at the intersection of this growing body of laws, especially as they impact our asset management business. This team works with a variety of business, compliance, risk, and legal associates across the globe dealing with novel legal and regulatory issues, helping to incorporate privacy and data protection into everything we do in service of the T. Rowe Price mission.
Responsibilities:
- Review and advise on product development and business initiatives to ensure privacy legal compliance, including privacy-by-design and security-by-design principles.
- Negotiate, draft, and review privacy-related contracts, including Investment Management & Distribution Agreements, Data Processing Agreements (DPAs), Data Privacy and security addendums, Vendor agreements, and AdTech contracts.
- Ensure compliance with U.S. privacy laws (CCPA/CPRA, and other state laws), digital and AdTech regulations, and global privacy frameworks, such as GDPR and privacy legislations in APAC, including Singapore's PDPA, Hong Kong's PDPO, Japan's APPI and Australia's Privacy Act 1988 (and the APPs).
- Monitor, track and analyze global regulatory developments, industry trends, and enforcement actions to proactively address legal issues as regards use of AI, including privacy issues in the use of AI, and other privacy legal risks and opportunities.
- Assist with data privacy and broader AI legal issues (e.g., ADMT) related to the deployment of AI use cases, tools, and systems across the enterprise.
- Provide strategic guidance to business leaders and cross-functional teams (Product, Engineering, Marketing, Security, Data Science, Global Distribution, HR and Investments) on privacy related legal issues and risk mitigation.
- Lead and support the Global Privacy Office in performing privacy impact assessments (PIAs/DPIAs), data mapping, and records of processing activities.
- Develop, implement, and maintain privacy policies, procedures, and training materials.
- Manage and coordinate responses to privacy and data security incidents, including potential regulatory notifications and remediation.
- Represent the company in industry groups and advocate for privacy best practices.
- Collaborate with cross-functional teams to implement legally compliant privacy best practices, reflecting our commitment to innovation, compliance, and ethical privacy practices.
Qualifications:
Required:
- J.D. from an accredited law school and active membership in at least one U.S. state bar
- 10+ years of total relevant work experience
- Deep knowledge of U.S. privacy laws (CCPA, CPRA, and other state laws) and familiarity with global privacy frameworks (including GDPR, Singapore's PDPA, Hong Kong's PDPO, Japan's APPI and the Privacy Act 1988 of Australia including its APPs)
- Demonstrated ability to draft and negotiate complex data or privacy-related contracts and technology contracts
- Demonstrated experience providing robust and practical legal advice relating to privacy and data protection
- Strong communication, negotiation, and teamwork skills, with the ability to influence and collaborate across different functions in a global organization with stakeholders with diverse background from various countries including not only US, but also EMEA and APAC
- Proven ability and experience to independently manage multiple complex projects engaging with cross-functional stakeholders in a global context and provide practical, actionable, and business-oriented legal advice
Preferred:
- Prior in-house experience as an attorney
- Experience advising clients within the asset management/financial services sector with global coverage
- Certification in privacy (e.g., CIPP/US, CIPP/A, CIPM, CIPT) is a plus
FINRA licenses are not required and will not be supported for this role.
Work Flexibility
This role is eligible for hybrid work, with up to one day per week from home.