Job Description

About the Team:

The Global E-Commerce Privacy team handles and oversees legal privacy and regulatory matters pertaining to TikTok's global e-commerce operations. The team works cross-functionally with multiple stakeholders around the world to tackle some of the most complex, interesting, and cutting-edge issues in privacy and security. We are looking for a highly motivated, experienced, and bright legal professional to join our exciting team.

This is a highly collaborative, on-site role that requires five days per week in the office.

Responsibilities:

- Actively monitor, analyze, and advise colleagues and cross-functional stakeholders on global privacy and data protection laws, regulatory developments, and enforcement trends relevant to TikTok's e-commerce business.

- Review new products, product features, and initiatives impacting the e-commerce business to identify relevant legal and regulatory requirements and guide compliance with privacy and data protection laws and TikTok policies.

- Advise on e-commerce-related privacy issues, including the collection, use, sharing, retention, and cross-border transfer of creator, merchant, buyer, logistics, payments, communications, and sensitive data.

- Assess and advise on third-party and intra-group data sharing arrangements, including vendor onboarding, data processing terms, cross-border transfer requirements, and other privacy-related contractual provisions.

- Support compliance assessments, privacy impact reviews, and implementation of controls relating to new products, data uses, and operational processes.

- Drive global privacy strategy for the e-commerce business, while coordinating with global and local counsel on multi-jurisdictional issues and consistent implementation across markets.

- Support the development of internal and external global privacy policies, notices, standards, guidelines, and governance processes relevant to the e-commerce business.

- Collaborate with cross-functional and cross-regional stakeholders to ensure the effective implementation of privacy policies and controls across the e-commerce business.

Minimum Qualifications

- Juris Doctor from an ABA-accredited law school and active membership in good standing in at least one U.S. state bar

- Extensive years of privacy-related legal experience

- In-depth knowledge of U.S. privacy and data protection laws, including U.S. state privacy laws, federal privacy and consumer protection frameworks, and relevant regulatory guidance and enforcement trends.

- Experience advising multinational businesses on a broad range of privacy matters, including data collection and use, cross-border transfers, product and feature counseling, merchant, creator and customer data, payments, logistics, communications, vendor relationships, and sensitive data

- Strong communication, interpersonal skills, and sound judgment, and the ability to translate complex legal concepts into practical advice for business and product teams

Preferred Qualifications:

- Legal experience gained in both private practice and an in-house role at a multinational business.

- CIPP or similar privacy certification in one or more jurisdictions.

- Experience advising on global privacy laws, regulations, and related compliance requirements.

- Familiarity with privacy and data protection laws across the broader AMS region, including Brazil's LGPD, Mexico's private-sector data protection law, and related regulatory guidance.