// Open Role at Aristocrat Gaming
Join Aristocrat Gaming as a Privacy Legal Counsel to champion data protection and privacy-by-design for premier gaming products. This role offers the chance to make a significant impact on player experiences within a vibrant, innovative hybrid work environment.
At Aristocrat, we focus on delivering happiness through the power of play. As a Privacy Legal Counsel, you will be responsible for guaranteeing our premier gaming products maintain top privacy and data protection standards. Our vibrant and inclusive culture at Aristocrat promotes innovation, creativity, and excellence in gaming. This role plays a critical part in supporting product development, data protection, and advancing player experiences. If you are driven, have proven skills, and seek new challenges, this position is ideal for you.
Join Aristocrat and be part of an ambitious team dedicated to flawless execution and innovative product development. This is your chance to create a significant impact on player privacy and gaming experiences across the globe!
This job description may have been reviewed and enhanced using AI-assisted tools to improve clarity, consistency, and inclusivity. All final content, role requirements and hiring decisions remain subject to human review and approval by Aristocrat.
We offer a comprehensive pay and benefits package designed to stay competitive in the market, support your wellbeing, and recognise your contribution to our success. Our approach is underpinned by a pay-for-performance belief in rewarding individual impact. Your specific compensation package will be determined by factors such as your skills, experience, qualifications, and location.
Depending on your role and location, you may be eligible for annual bonuses and incentives, health and wellbeing benefits, paid time off, retirement plans, insurance coverage, and other local or statutory benefits.
Specific details about compensation and benefits for this position will be discussed during the recruitment process.
Qualified lawyer in the US with 3+ years PQE (or equivalent). Strong foundation in privacy and data protection law, encompassing CCPA, CPRA, HIPPA, COPPA, CAN-SPAM, GDPR, and UK GDPR. Experience advising on consumer-facing digital products or platforms, ideally in a product counseling role. Demonstrated ability to embed legal advice into product development processes. Excellent communication skills and ability to work cross-functionally with technical and non-legal teams. Experience in the gaming industry preferred. Familiarity with ad tech, analytics, and data monetization models preferred. Experience developing solutions involving children’s data, age verification, or youth safeguarding frameworks (e.g., Age Appropriate Design Code considerations) preferred. Certification or specialization in privacy (e.g., CIPP/US, CIPP/E, CIPM) preferred. In-house experience in a fast-paced technology or gaming environment preferred. Responsibilities include providing embedded legal support to product and engineering teams on privacy-by-design and default principles across the game lifecycle, advising on the development and launch of new features involving player data, personalization, live ops, and online services, conducting and guiding Data Protection Impact Assessments (DPIAs) and risk assessments, providing guidance on adherence to GDPR, UK GDPR, ePrivacy directives, and applicable European privacy regulations, interpreting and operationalizing regulatory requirements into practical product mentorship, monitoring and providing guidance on forthcoming US/EU/UK developments (e.g., Digital Services Act, AI-related regulation, children’s data rules), counseling on data use in free-to-play models, including analytics, advertising, monetization, and player engagement features, advising on children’s and teens’ privacy, age-appropriate building, parental controls, and profiling restrictions, supporting the use of virtual economies, telemetry, and behavioral data while managing regulatory risk, evaluating and providing suggestions on third-party integrations (analytics, ad networks, SDKs) and the related data-sharing agreements, drafting and negotiating data protection clauses, DPAs, and cross-border transfer mechanisms (e.g., SCCs, UK IDTA), and working with teams cross-functionally (including GIS, Compliance, Product, Engineering, and Marketing) on user protections and platform obligations.