Director, Privacy & Data Governance

The ACLU seeks applicants for the full-time position of Director, Privacy & Data Governance in the Administration & Finance Department of the ACLU’s National office in New York, NY. This is a hybrid role that has in-office requirements of two (2) days per week or eight (8) days per month.

The Privacy & Data Governance (P&DG) unit works to enable the ACLU to honor individual privacy and choice, protect data in our possession, and be a leader in non-profit data governance practices. The unit is responsible for a cross-departmental Privacy & Data Governance program that provides centralized governance for organizational data policies and internal controls, and works with National and Affiliate staff on an ongoing basis to establish and document consistent practices that meet evolving regulatory and organizational expectations for data protection and privacy.

We will review applications on a rolling basis, but priority consideration will be given to those who submit applications by March 31, 2025.

WHAT YOU'LL DO

Reporting to the Chief Privacy Officer, the Director, Privacy & Data Governance is responsible for the day-to-day management of the Privacy & Data Governance program and unit. The Director will work with the Chief Privacy Officer to establish program priorities and lead their successful implementation. The Director is responsible for updating, implementing, and monitoring compliance with organizational privacy policies and standards; overseeing nationwide fulfillment of consumer data rights; and building a privacy aware organization.

YOUR DAY TO DAY

Program Governance and Management

• Work with the Chief Privacy Officer to manage a cross-functional P&DG program that is responsive to organizational needs. This includes supporting the Chief Privacy Officer in preparing for Executive Steering Committee (ExecSC) meetings, leading Operational Steering Committee (OpsSC) meetings, and working with OpsSC members to operationalize program priorities
• Represent P&DG in the Information Governance Working Group
• Work with the Information Governance Working Group to update and implement privacy and data governance policies
• Oversee the management of P&DG communication channels and ensure questions and requests from Nationwide staff and the public are resolved efficiently
• Develop and track P&DG program performance metrics, including key metrics for fulfilling consumer data rights
• Identify and recommend strategic opportunities to leadership for improvement. Partner with internal and external stakeholders to implement agreed upon recommendations

Knowledge and Awareness

• Design and implement a nationwide Knowledge and Awareness strategy and plan to create a privacy aware organization
• Establish and manage collaborative relationships with Affiliates’ privacy and data governance points-of-contact
• Oversee nationwide compliance with mandatory privacy and confidentiality trainings
• Oversee internal communications, such as the bi-monthly Privacy & Data Governance newsletter
• Manage the P&DG unit’s library of guidance materials for nationwide staff, including working with P&DG colleagues to develop content
• Work with National Departments to create function-specific trainings that incorporate privacy and data governance best practices

Data Practices

• Maintain the central inventory of consumer data processed and processing activities
• Develop and manage a process for information system owners to onboard new data systems and practices to our privacy program management platform, including advising on data mapping requirements
• Monitor data governance controls and procedures to evaluate the ongoing effectiveness of the P&DG program

Public Awareness and Data Choices

• Maintain current knowledge of applicable federal and state privacy laws and monitor advancements in information privacy technologies and practices to ensure organizational adaptation and compliance
• Lead the drafting and publishing of transparent privacy notice(s) to enable informed consent from consumers. This requires working collaboratively with Corporate Counsel, National Departments, and Affiliates
• Oversee the nationwide fulfillment of consumer data choices, such as access, correction, deletion, portability, and opt-out requests. This includes working collaboratively with National Departments and Affiliate colleagues to develop compliant processes for fulfilling consumer data choices and overseeing staff and vendors that manage and support those processes
• Oversee the resolution of questions and requests from the public, including providing direction and guidance to staff and vendors to resolve questions and requests, and creating/updating standard operating procedures, as needed

Administration and Unit Management

• Assist the Chief Privacy Officer in annual planning and budgeting activities
• Assist the Chief Privacy Officer in establishing unit working norms, processes, and procedures
• Supervise staff
• Manage P&DG vendors, including identifying prospective vendors to support P&DG priorities (e.g. managing a request for proposals), assigning responsibilities and overseeing their successful completion, and ensuring vendor invoices are paid
• Other special projects as assigned

FUTURE ACLU'ERS WILL

• Be committed to advancing the mission of the ACLU
• Center and embed the principles of equity, inclusion and belonging in their work by demonstrating commitment to diversity with an approach that respects and values multiple perspectives
• Be committed to work collaboratively and respectfully toward resolving obstacles and conflicts

WHAT YOU'LL BRING

• Deep knowledge of and practical implementation experience with privacy and confidentiality policies and regulations, including knowledge of comprehensive consumer privacy laws (e.g. VCDPA, CPA, OCPA), consumer health data laws (e.g. MHMDA), child data laws (e.g. COPPA), AI laws (e.g. CAIA), and data broker laws (e.g. OR’s House Bill 2052)
• Experience implementing and managing a privacy program management tool (e.g. OneTrust, TrustArc, DataGrail)
• Experience designing, documenting, and managing standard operating procedures
• Experience managing staff and vendors
• Critical thinker with demonstrated problem-solving skills and the ability to make independent decisions
• Proven record of managing change in large, complex organizations
• Strong project management and program management skills
• Ability to handle multiple projects simultaneously, clearly communicate progress, and address issues while still meeting required deadlines
• Experience leading and managing cross-functional projects and building consensus among a range of stakeholders, including internal groups and outside consultants
• Ability to comprehend complex subjects and communicate them effectively, written and spoken
• Strong research capabilities
• Ability to work effectively independently and as part of a team

PREFERRED QUALIFICATIONS

• Understanding of how data systems and digital technology tools operate
• Experience working in a federated organizational structure
• Relevant privacy (e.g. CIPM or CIPP-US), project management (e.g. PMP), and/or change management (e.g. CCMP) certifications
• Advanced degree in relevant field, such as, Law, Public Administration, Public Policy, Business Administration, Computer Science, Information Management, or Marketing

COMPENSATION

The ACLU is committed to equity, transparency, and clarity in pay. Consistent with our compensation philosophy, there is a set salary for each role based on geographic work location. The annual salary for this position is $182,431 (Level D), reflecting the salary of a position based in New York, NY. Salaries are subject to a regional pay adjustment if authorization is granted to work outside of the location listed in this posting.

For details on our pay structure, please visit: https://www.aclu.org/careers/ACLU_Geographic_Pay_Structure-July_2024.pdf

WHY THE ACLU

For over 100 years, the ACLU has worked to defend and preserve the individual rights and liberties guaranteed by the Constitution and laws of the United States. Whether it’s ending mass incarceration, achieving full equality for the LGBTQ+ community, establishing new privacy protections for our digital age, or preserving the right to vote or the right to have an abortion, the ACLU takes up the toughest civil liberties cases and issues to defend all people.

We know that great people make a great organization. We value our people and know that what we offer is essential not just their work, but to their overall well-being.

At the ACLU, we offer a broad range of benefits, which include:

• Time away to focus on the things that matter with a generous paid time-off policy
• Focus on your well-being with comprehensive healthcare benefits (including medical, dental and vision coverage, parental leave, gender affirming care & fertility treatment)
• Plan for your retirement with 401k plan and employer match
• We support employee growth and development through annual professional development funds, internal professional development programs and workshops

OUR COMMITMENT TO ACCESSIBILITY, EQUITY, DIVERSITY & INCLUSION

Accessibility, equity, diversity and inclusion are core values of the ACLU and central to our work to advance liberty, equality, and justice for all. For us diversity, equity, accessibility, and inclusion are not just check-the-box activities, but a chance for us to make long-term meaningful change. We are a community committed to learning and growth, humility and grace, transparency and accountability. We believe in a collective responsibility to create a culture of belonging for all people within our organization – one that respects and embraces difference; treats everyone equitably; and empowers our colleagues to do the best work possible. We are as committed to anti-oppression, anti-ableism, and anti-racism internally as we are externally. Because whether we’re in the courts or in the office, we believe ‘We the People’ means all of us.

With this commitment in mind, we strongly encourage applications from all qualified individuals without regard to race, color, religion, gender, sexual orientation, gender identity or expression, age, national origin, marital status, citizenship, disability, veteran status and record of arrest or conviction, or any other characteristic protected by applicable law.