Privacy & Regulatory Attorney – Pizza Hut Global

⁠​‌‌​​​‌​​​‌‌‌​‌​​​‌‌‌​​​​‌​​‌​‌‌​​‌‌‌​​‌⁠

JOB DESCRIPTION

Pizza Hut Global has an immediate need for a Privacy & Regulatory Attorney who has a passion for pizza and privacy. The Privacy & Regulatory Attorney will serve a key role within the Pizza Hut Global Legal Department and will work with cross-functional partners to address privacy, regulatory, and data governance-related risks and compliance. The Privacy & Regulatory Attorney will be responsible for creating and revising enterprise-wide processes to address global privacy laws, including the EU/UK General Data Protection Regulation (GDPR), the California Consumer Privacy Act (CCPA), and Canadian privacy regulations(PIPEDA and Quebec’s Law 25). The successful candidate will have a growth mindset and a passion for providing world-class legal support by collaboratively working across business units while consistently modeling Pizza Hut’s culture.

RESPONSIBILITIES

• Provide legal guidance on global privacy and data protection requirements, including compliance with the EU/UK GDPR, CCPA, PIPEDA, Quebec’s Law 25, and other key global privacy regulatory frameworks.
• Advise in privacy program development, including implementing policies and procedures.
• Partner with IT, marketing, digital, and security teams on data governance, cybersecurity matters, and AI.
• Support privacy reviews related to digital platforms, mobile apps, loyalty programs, and marketing technology.
• Monitor global regulatory developments and advise the business on evolving privacy risks and obligations.
• Evaluate legal risks regarding customer accounts, engagement, messaging, data retention, and data deletion to facilitate business objectives while maintaining customer data privacy and legal compliance.
• Support litigation team on privacy matters.

QUALIFICATIONS

Required:

• Juris Doctor (JD) degree from an ABA accredited law school.
• Active bar membership in good standing.
• 3-5+ years of legal experience, including either law firm or relevant in-house experience.
• 3-5+ years of experience supporting corporate privacy functions.
• In-depth knowledge of and proficiency in privacy and data protection frameworks, including the GDPR, PIPEDA, Quebec’s Law 25, and CCPA.
• Experience working with international teams and multi-jurisdictional legal issues.

Preferred:

• Experience supporting consumer brands, franchised systems, or global retail/QSR organizations.
• Familiarity with AI, digital commerce, and marketing technology ecosystems.
• Familiarity with children’s privacy regulations, especially in the U.S.

Key Competencies:

• Strong business judgment and pragmatic problem-solving
• Ability to operate in a fast-paced, matrixed global environment
• Excellent communication and stakeholder management skills
• Strategic thinking with strong attention to detail
• Ability to balance risk management with business enablement

Salary Range: $125,200 to $147,200 annually + bonus eligibility. This is the expected salary range for this position. Ultimately, in determining pay, we'll consider the successful candidate’s location, experience, and other job-related factors.