Privacy Paralegal

Ever wonder who makes sure a Magic: The Gathering account signup, a Nerf promotion, and a Hasbro Pulse pre-order all handle a player's data the right way? That's this team — and this role is at the center of it!

Hasbro's Global Privacy team supports the whole company! We make sure our games, websites, and products handle the personal data of players, employees, and fans responsibly, wherever they are. We're hiring a Privacy Paralegal to own the day-to-day operations of that program.

This is a hands-on role with a lot of ownership. You will be the primary contact for most internal teams when they have privacy questions. You will develop processes that help a small team support a large company.

This role is currently based at our Renton, WA or Boston, MA office and requires onsite work 3 days per week, currently Tuesday - Thursday. The Company may change the work arrangement, including the number or designation of onsite days, based on business needs and subject to applicable law.

What You Will Do as a Privacy Paralegal:

• Build and refine how privacy incidents and inquiries get reported, sorted, and prioritized and be the first point of contact for the rest of the business.
• Work with Legal, Marketing, Central Technology, and Privacy Operations on technology compliance. This includes consistent classification of data collection purposes across many sites and products.
• Collaborate with Privacy Operations to maintain up-to-date data maps and records of processing activities, and to handle the privacy tech stack — including consent tooling, request workflows, and assessment intake — as products, vendors, and teams evolve.
• Sit down with engineering, web development, and marketing technology teams to learn how data moves through our sites and apps. This includes tag managers, SDKs, APIs, and backend systems. Work with them to implement consent, preference, and data collection requirements as the law requires.
• Coordinate privacy reviews for new products, features, and vendors. Assemble the technical details attorneys need to assess risk. Keep the review moving across teams and follow it through to a decision people can build against.
• Help build our privacy notices and policies, working with attorneys on language and positioning as regulations change.
• Represent the privacy group as the main liaison to Product Development and engineering. Help integrate compliance requirements into website and platform workflows early, not late.
• Write the playbooks, templates, and standard operating procedures that keep the program running.
• Supervise the privacy program's budget and handle its invoicing.
• Plan Global Data Privacy Day and other company-wide privacy awareness efforts.
• Prioritize the privacy team's SharePoint documentation to enable a detailed response to an audit request.
• Answer privacy questions from other departments, subsidiaries, and affiliates, and turn legal requirements into practical direction people can actually act on.

What You Will Bring:

• College degree or equivalent experience; paralegal certificate a plus.
• At least 3 years supporting a legal or compliance function, ideally in privacy or data protection.
• Solid understanding of US state privacy laws, GDPR, and children's privacy rules (COPPA).
• Experience with a privacy management platform such as Ketch or OneTrust.
• Experience working shoulder to shoulder with technical teams — you can join a working session with engineers and leave with requirements that both sides understand the same way.
• Word, Excel, PowerPoint, SharePoint, MS Teams, and Jira.
• Knowledge of functions linked to privacy management: handling privacy tools, conducting data mapping, and documenting processing activities.
• Willingness to work with colleagues and collaborators in other time zones, and in different business units.
• Comfortable with technical details about how data is collected, sent, and stored across websites, mobile apps, APIs, SDKs, databases, and tag managers. This allows translating a legal requirement into something an engineer can build.

Nice to Have:

• CIPP certification (CIPP/US, CIPP/E, or similar).
• Experience with cookie and tracking consent management, and website compliance reviews.
• Drafting experience with Data Processing Agreements (DPA).