Privacy & Regulatory Attorney – Pizza Hut Global

Pizza Hut Global has an immediate need for a Privacy & Regulatory Attorney who has a passion for pizza and privacy. The Privacy & Regulatory Attorney will serve a key role within the Pizza Hut Global Legal Department and will work with cross-functional partners to address privacy, regulatory, and data governance-related risks and compliance. The Privacy & Regulatory Attorney will be responsible for creating and revising enterprise-wide processes to address global privacy laws, including the EU/UK General Data Protection Regulation (GDPR), the California Consumer Privacy Act (CCPA), and Canadian privacy regulations(PIPEDA and Quebec’s Law 25). The successful candidate will have a growth mindset and a passion for providing world-class legal support by collaboratively working across business units while consistently modeling Pizza Hut’s culture. Provide legal guidance on global privacy and data protection requirements, including compliance with the EU/UK GDPR, CCPA, PIPEDA, Quebec’s Law 25, and other key global privacy regulatory frameworks. Advise in privacy program development, including implementing policies and procedures. Partner with IT, marketing, digital, and security teams on data governance, cybersecurity matters, and AI. Support privacy reviews related to digital platforms, mobile apps, loyalty programs, and marketing technology. Monitor global regulatory developments and advise the business on evolving privacy risks and obligations. Evaluate legal risks regarding customer accounts, engagement, messaging, data retention, and data deletion to facilitate business objectives while maintaining customer data privacy and legal compliance. Support litigation team on privacy matters. Required: Juris Doctor (JD) degree from an ABA accredited law school. Active bar membership in good standing. 3-5+ years of legal experience, including either law firm or relevant in-house experience. 3-5+ years of experience supporting corporate privacy functions. In-depth knowledge of and proficiency in privacy and data protection frameworks, including the GDPR, PIPEDA, Quebec’s Law 25, and CCPA. Experience working with international teams and multi-jurisdictional legal issues. Preferred: Experience supporting consumer brands, franchised systems, or global retail/QSR organizations. Familiarity with AI, digital commerce, and marketing technology ecosystems. Familiarity with children’s privacy regulations, especially in the U.S. Key Competencies: Strong business judgment and pragmatic problem-solving Ability to operate in a fast-paced, matrixed global environment Excellent communication and stakeholder management skills Strategic thinking with strong attention to detail Ability to balance risk management with business enablement Salary Range: $125,200 to $147,200 annually + bonus eligibility. This is the expected salary range for this position. Ultimately, in determining pay, we'll consider the successful candidate’s location, experience, and other job-related factors.