Privacy Counsel, Law & Regulation (IL, NC, TX, AZ, NY, CA) at Allstate

Job description

At Allstate, great things happen when our people work together to protect families and their belongings from life’s uncertainties. And for more than 90 years, our innovative drive has kept us a step ahead of our customers’ evolving needs. From advocating for seat belts, air bags and graduated driving laws, to being an industry leader in pricing sophistication, telematics, and, more recently, device and identity protection. Job Description We are seeking a highly motivated, business-minded attorney with deep privacy expertise who is excited to work at the intersection of law, technology, data, mobility, and consumer innovation. This is a unique opportunity to join Arity's legal team and help shape the future of data-driven products and services in an increasingly complex and evolving regulatory landscape. In this role, you will serve as a trusted legal advisor to Arity, Allstate's mobility and technology subsidiary, providing practical, real-time, and strategic counsel on a broad range of privacy, data governance, emerging technology, and regulatory compliance matters. You will partner closely with business, product, technology, marketing, and data teams to enable innovation while effectively managing legal and regulatory risk. As a recognized subject matter expert in state privacy laws and emerging privacy regulations, you will play a key role in developing scalable compliance strategies, advising on novel business initiatives, new data models and products, and influencing cross-functional decision-making. The ideal candidate is a collaborative leader who thrives in a fast-paced environment and has a proven ability to drive solutions, build consensus, and deliver results across diverse stakeholder groups. Key Responsibilities & Core Competencies Serve as a trusted privacy advisor providing strategic counsel on U.S. state privacy laws, GDPR, and other global privacy frameworks. Conduct complex legal analysis to determine the applicability of laws, regulations, exemptions, and compliance requirements across evolving business models and technologies. Partner proactively with privacy program leads to ensure ongoing compliance with existing legal and regulatory requirements while supporting the implementation of emerging privacy, data governance, and artificial intelligence (AI) regulations. Provide legal counsel to advertising, marketing, and product teams across the audience lifecycle, including audience creation, activation, measurement, attribution, and the deployment of tags, pixels, SDKs, and related technologies. Advise on consent management, consumer choice mechanisms, and regulatory requirements governing data collection and use. Advise on Fair Credit Reporting Act (FCRA) matters related to the collection, use, and sharing of consumer report data, including permissible purpose requirements, notice obligations, and disclosure considerations. Lead privacy support for complex data-driven transactions and commercial arrangements, including data licensing agreements, data supply agreements, clean room agreements, strategic partnerships, and other transactions where data rights and regulatory considerations are critical. Counsel business stakeholders on data strategy and governance matters, including data provenance, permitted use rights, consumer-facing disclosures, data sharing practices, licensing rights, retention requirements, and data lifecycle management. Collaborate effectively across Law & Regulation, product, technology, marketing, data, compliance, and business teams to support strategic initiatives and deliver practical, business-oriented legal solutions. Anticipate legal and regulatory developments, identify potential risks, and develop creative, solution-oriented approaches that enable innovation while appropriately managing legal exposure. Conduct risk-benefit analyses of key business initiatives, considering enterprise-wide implications and providing actionable recommendations to support informed decision-making.