Senior Privacy Counsel

About Morningstar:
Morningstar is a leading global provider of independent investment insights, serving both individual and institutional investors across public and private markets. Our offerings include a wide range of data, research, and investment management services, with $300+ billion in assets under management. Operating in 32 countries, Morningstar supports financial advisors, asset managers, retirement plan providers, and more with comprehensive investment solutions.
The Role:
The Senior Privacy Counsel sits within Morningstar's Legal and Compliance team and reports to the Global Head of Privacy Legal. This role will serve as a legal advisor on privacy and AI initiatives across Morningstar's global teams. The Senior Privacy Counsel will lead product reviews, develop enterprise privacy and AI governance, lead incident response, and drive innovative legal solutions.
Job Responsibilities:

• Serve as lead legal advisor on privacy- and AI-related projects.
• Provide business-oriented and strategic legal advice to personnel at all levels of Morningstar companies.
• Act as subject matter expert regarding privacy and AI regulations in the United States, Europe, China, Canada, and various other locations where Morningstar does business.
• Lead legal product reviews, including privacy reviews, data protection impact assessments, and AI impact assessments.
• Develop and implement privacy and AI policies and procedures.
• Serve as escalation point for privacy operations team for data subject requests, customer due diligence requests, and other matters.
• Monitor new laws, regulations and other legal developments; develop pragmatic compliance strategies in response.
• Assist information security team with response to suspected privacy incidents, advise regarding regulatory obligations, including requirements to notify impacted parties.
• Draft, review, and negotiate privacy terms in commercial agreements, including data processing agreements.
• Develop role-based privacy training materials for teams across variety of functions and promote.
• Collaborate with legal team peers to develop innovative legal solutions by incorporating technology into legal operations.

Qualifications:

• 7+ years of experience as a practicing attorney
• Licensed to practice law in local jurisdiction.
• Strong understanding of global consumer privacy regulations, including GPDR and CCPA; and AI regulations, including the AI Act.
• Privacy certifications (CIPPE/E, CIPP/US, CIPM, CIPT, AIGP) or equivalent a plus.
• Experience drafting and negotiating data protection agreements and/or commercial agreements.
• Product counsel experience, particularly conducting product-level legal reviews and creating compliance strategies for consumer-facing products.
• Ability to work independently and manage a demanding workload with minimal supervision.
• Experience serving as a strategic partner with cross-functional teams.
• Strong technical fluency with ability to quickly study and understand complex AI/ML systems and other new technologies and understand technical documentation.
• Fluent in English.

Ready to Shape the Future? At Morningstar, every hire we make strengthens our mission to empower investor success. Apply now and help shape the future of investing with us
Morningstar's hybrid work environment gives you the opportunity to collaborate in-person each week as we've found that we're at our best when we're purposely together on a regular basis. In most of our locations, our hybrid work model is four days in-office each week. A range of other benefits are also available to enhance flexibility as needs change. No matter where you are, you'll have tools and resources to engage meaningfully with your global colleagues.
315_Sustainalytics SRL Legal Entity