
Data Privacy Corporate Counsel II
- Naperville, IL
- $170,000 per year
- Permanent
- Full-time
Future Work Location: Aurora, IL (Anticipated October 2025)This role is eligible to participate in ALDI’s Hybrid Work Program, which requires work in-office at least 2 days per month.Duties and Responsibilities:Must be able to perform duties with or without reasonable accommodation.
- Provides legal counsel on privacy and AI-related matters across departments, including marketing, eCommerce and IT.
- Advises on AI use cases, vendor contracts, and data processing agreements (DPAs), ensuring alignment with privacy regulations and ethical standards.
- Collaborates with cybersecurity and compliance teams to ensure cohesive data protection and AI risk frameworks.
- Monitors and interprets evolving privacy and AI legislation and communicates implications to stakeholders.
- Provides input to their direct leader concerning personnel hiring.
- Identifies legal issues and recommends responsive action. Engages with business, external parties, suppliers involved in the legal process, and internal/external counsel regarding relevant areas of expertise.
- Evaluates and analyzes legal issues and reports findings, as well as recommendations, to direct leader.
- Communicates complex information and legal concepts to a broad range of clients, from ALDI employees to executive management.
- Advises on any changes or actions to improve the efficiency and effectiveness of the team.
- Informs management of recurring issues or when additional team training may be required.
- Researches, analyzes, and keeps current on legal issues and laws, legislation, regulations, and court decisions affecting the relevant areas of law; identifies and communicates impactful updates to the team.
- Identifies and analyzes company procedures on a proactive basis to ensure best practices.
- Prepares reports and analyzes data to identify exposures and risks.
- Provides proactive analysis of current projects and analytical review of reported results.
- Drafts memorandums, attorney correspondence, reports, and other legal documents.
- Leads legal policies and strategic planning related to their area of subject matter expertise in order to support tactical business growth.
- Manages complex legal negotiations with key stakeholders and vendors while collaborating with various cross-functional business teams providing for stronger Legal and Business relationships.
- Supports Corporate Counsels in providing the business with accurate and timely advice and counseling on a wide variety of legal matters.
- Leverages legal expertise, experience, and business acumen to support the company in achieving its objectives.
- Assists in training and developing team members to retain a motivated and professional workforce.
- Serves as subject matter expert and resource on issues related to privacy and data protection.
- Monitors the evolution of the privacy regulatory landscape in various jurisdictions and incorporate new laws and regulations into the privacy framework.
- Drafts internal and external privacy notices and disclosures, contract templates, and related data privacy and protection documents.
- Executes and maintains an organizational data map and documentation of processing activities and general data lifecycle management.
- Implements privacy assessments, including privacy risk and transfer impact assessments, and other required privacy procedures to ensure compliance with global privacy laws.
- Responds to and manages privacy related inquiries and investigations on a global basis, including complex privacy-related complaints, data subject requests, personal data breaches and support for interactions with local privacy authorities.
- Coordinates and delivers ongoing and/or training materials for organization globally on privacy best practices and regulations.
- Conducts research, analysis, and reporting on the impacts of new legal changes or of potential policy changes.
- Assists in training and developing team members to retain a motivated and professional workforce.
- Collaborates with team members and communicates relevant information to leadership.
- Complies with ALDI privacy and security requirements and policies if job responsibilities include possible access to confidential and/or sensitive information.
- Other duties as assigned.
- Consistently demonstrates the Mindsets, ALDI Acts Competencies and Professional Skills (M.A.P.) as outlined for the role.
- Gives attention to detail and follows instruction.
- Prepares written materials to meet purpose and audience.
- Develops and maintains positive relationships with internal and external parties.
- Works cooperatively and collaboratively within a group.
- Understands the history, strategy, organizational authority, interdependence of job duties, products, systems, and services of the company.
- Ability to work independently and within a team environment.
- Proficient in legal analysis, drafting, research, and presentation skills.
- Knowledge of United States data privacy law.
- Proficient in Microsoft Office Suite.
- Ability to analyze and present complex data.
- Ability to interpret and apply company policies and procedures.
- Knowledge of retail industry standards and practices.
- Negotiation skills.
- Ability to apply creative solutions.
- Proficient in reviewing data to determine accuracy and completeness.
- Excellent legal drafting, research, and presentation skills.
- Bachelor's Degree required.
- A minimum of 5 years of progressive experience in a firm, in-house or regulatory agency focused on issues related to U.S. privacy or data protection required.
- J.D. required from an ABA accredited law school; licensed to practice in Illinois (or immediate ability to become licensed) required.
- Strong knowledge of U.S. and international privacy laws (e.g., CPRA, GDPR) and emerging AI regulations.
- Experience with privacy program management, contract negotiation, and cross-functional collaboration preferred.
- Familiarity with AI technologies and their legal implications preferred.
- Or, a combination of education and experience providing equivalent knowledge.
- Work may be performed in an office, remote office or a combination of both where a computer and office equipment may be used as needed to perform duties.
- Regularly required to sit, reach, grasp, stand and move from one area to another.
- Constantly and repeatedly use keyboard/mouse.
- Occasionally required to push, pull, bend, lift and move up to 25 lbs.
- Domestic travel required.
- Up to 10%.