WHAT YOU WILL OWN:

Oversee the management of PointsBet’s USA privacy and data security program including drafting PointsBet’s USA privacy and data security policies.
Support the management of PointsBet’s global privacy and data security program.
Develop and implement data protection and privacy procedures and processes for PointsBet USA’s business.
Ensure consistency and the harmonization of PointsBet USA’s privacy and data protection program, policies, procedures and compliance with global business requirements and obligations including GDPR, Australian and Canadian privacy obligations.
Advise various business teams (e.g Tech, Customer, Advertising and Marketing, Human Resources etc.) on the implementation of privacy regulations and compliance with applicable privacy laws.
Identify and manage risks, providing practical legal guidance to various business teams (e.g Tech, Customer, Advertising and Marketing, Human Resources etc.).
Advise, draft and negotiate the privacy and data security portions of commercial contracts and develop company policies on acceptable contractual positions.
Collaborate with internal team members and outside counsel to efficiently manage privacy and data security matters and various aspects of outside counsel relationships.
Advise on privacy and data security incident response requirements, policies and procedures and assist Tech, Customer and other business teams on incident responses.
Review and prepare responses to requests from law enforcement or government agencies.
Manage and support insurance claims and arbitration, litigation and administrative proceedings related to privacy and data protection (including during pre-litigation stages).
Design and implement a communication strategy including training and awareness on privacy and data protection.
Manage and review privacy impact assessments.
Maintain and keep up-to-date expert knowledge of data protection laws, regulations, pending legislation and practices in the USA and a willingness to obtain a good working knowledge of other jurisdictions outside of the USA including Australia, Canada, UK and Ireland/EU (GDPR).