Privacy Counsel

Privacy Counsel

London, United Kingdom

Legal / Full-time / Hybrid

[Employer hidden] builds the world’s leading software for data-driven decisions and operations. By bringing the right data to the people who need it, our platforms empower our partners to develop lifesaving drugs, forecast supply chain disruptions, locate missing children, and more.

[Employer hidden]’s in-house legal team works to proactively address legal issues so that [Employer hidden] can continue to drive positive impact in the world. As Privacy Counsel, you will give practical, business-oriented legal advice and counsel on the General Data Protection Regulation (GDPR) and European data protection matters to stakeholders across the organisation. You'll assess legal risks, develop mitigation strategies, and provide guidance on complex issues including international data transfers, consent management, legitimate interests assessments, and data subject rights. In this role, you will be responsible for developing and communicating [Employer hidden]’s positions on key data protection issues to prospective and current customers, particularly in relation to the GDPR and other key privacy laws and regulations (EU AI Act, ePrivacy Directive, UK GDPR, CCPA, etc.). You will partner closely with the commercial legal team to help accelerate and facilitate customer discussions and directly support complex negotiations.

We’re a team that values both creativity and teamwork - whether operating solo or collaboratively, we endeavor to achieve great results on challenging, time-sensitive projects. You’ll be given open ended objectives and will find ways to turn them into outcomes. By focusing on the broad vision without losing sight of the details, you’ll bring large and multi-phase projects to successful completion while prioritising team outcomes over individual wins. You are able to deliver complex information in an understandable way, and can manage high touch stakeholders in a constantly shifting landscape.

You enjoy the responsibility that comes with owning problems and finding solutions. You are empathetic and able to effectively navigate a complex organisation involving a wide variety of audiences, including under time-sensitive situations. You are ready to jump into a deal at a moment’s notice and become an expert on the intricate privacy details of the contracts that enable [Employer hidden] to implement its cutting-edge technology to solve real-world problems. You are passionate about conceiving and implementing scalable systems that increase your impact, and that of the in-house legal team, over time.

Core Responsibilities

• Serve as a legal advisor on GDPR and European data protection matters, as well as on other key privacy and data protection laws and regulations (EU AI Act, ePrivacy Directive, UK GDPR, CCPA, etc.).
• Define and develop [Employer hidden]’s substantive positions on data protection agreements, privacy impact assessments, data incidents, data mapping exercises and compliance audits under GDPR and other legal/regulatory frameworks.
• Draft, review, and negotiate data processing agreements (DPAs), standard contractual clauses (SCCs), and other privacy-related contracts with vendors, customers, and partners.
• Draft or enhance privacy programme-related standards, policies, procedures and playbooks, and provide training in line with changing regulatory guidance and best practices.
• Assist in defining and building infrastructure to effectively communicate [Employer hidden]’s data protection positions in a scalable manner to [Employer hidden]’s rapidly expanding portfolio of prospective and current customers.
• Collaborate closely with Business, Operations, Finance, and Engineering teams to shepherd deals to execution and product development, monitor regulatory developments, assess their impact on the business, and develop compliance strategies for new requirements.
• Have a demonstrated interest in technology and AI, including recent AI regulatory developments. Review incoming requests for AI use cases and assist in maturing AI governance framework and policies from a data protection perspective.

What We Value

• Demonstrated ability developing creative and analytical solutions to novel issues.
• Ability to multitask, problem solve, and balance competing priorities in a rapidly changing environment.
• Willingness and curiosity to learn and implement new data privacy laws across the globe including the EU & the UK, the U.S, MENA, and the APAC regions.
• Willingness to work flexibly on a varied schedule based on the needs of the team (currently in the US and in Europe), being available during nights and weekends as needed.
• Ability to collaborate with a cross-functional team, leveraging effective communication, strong writing and customer service skills.
• Expert knowledge of GDPR and EU data protection framework
• Extensive experience negotiating privacy contract terms in a variety of services, licensing, and other commercial agreements.
• In-house legal experience.
• Technical background.

What We Require

• Attorney in good standing, Qualified lawyer admitted in the UK or another major European jurisdiction
• Commercially-minded lawyer, 5+ years of experience with data protection and privacy laws and a particular focus on the software industry and AI technologies.
• Fluency in spoken and written English.