• Advise business partners on privacy and data protection matters, including the collection, use, sharing, retention, and security of personal information • Conduct risk assessments related to privacy incidents and data security events and recommend remediation and notification actions • Provide legal guidance on new technologies, products, and processes that impact company data, with a focus on risk mitigation and compliance • Draft, review, and negotiate privacy-related provisions in commercial contracts and vendor agreements • Monitor, research, and advise on legal and regulatory developments affecting privacy and data protection, particularly in the insurance and financial services sectors • Partner with cross-functional teams (including compliance, security, IT, and product) to develop and improve privacy workflows, policies, and processes • Support legislative and regulatory engagement efforts related to privacy in coordination with government relations and trade associations • Engage and manage outside counsel or alternative legal service providers to deliver high-quality, cost-effective legal services