Associate General Counsel, Privacy Compliance

Overview

This role involves ensuring the privacy of personal information and supporting responsible AI compliance across a global, regulated environment. Based in London, you will oversee the functions of the Office of the Data Protection Officer to manage the organization’s existing privacy program and help ensure ongoing compliance with applicable data protection and privacy laws, including the EU General Data Protection Regulation (GDPR). You will also oversee elements of the responsible AI program and related compliance requirements stemming from AI regulations, including the EU AI Act.

This position works closely with the Data and Privacy Operations team and product lawyers to build, implement, and maintain privacy and AI program components.

Responsibilities

• Serve as the subject matter expert on existing and emerging AI and data protection regulations or guidance in the EMEA region, with a focus on jurisdictions where the organization has offices (multiple locations in the EU, UK, Switzerland, and UAE).
• Advise on regulatory impact across multiple functions.
• Advise on requirements related to cross-border data transfers globally.
• Collaborate with and advise product lawyers on privacy by design policies.
• Advise the Data and Privacy Operations team on:
  • data subject requests
  • records of processing activities
  • privacy and AI impact assessments
  • other related activities
• Advise the Data and Privacy Operations team on conducting and approving privacy and AI vendor reviews.
• Support the commercial transactions legal team in negotiating data processing addendums and similar contractual language under global privacy laws.
• Support corporate legal on data and privacy-related due diligence for M&A transactions, and assist with post-acquisition integration tasks related to privacy and AI compliance.
• Advise cross-functional teams on data protection implications and legal requirements applicable to security and privacy incidents, exercising judgment and discretion on incident handling procedures and communications.
• Create and contribute to playbooks and FAQ libraries to keep teams current on guidance related to privacy, data governance, and responsible AI.

Requirements

• LLB/JD equivalent degree with strong academic credentials and admitted to practice law in one of the jurisdictions where the organization has an office and/or be a U.S. or UK-qualified lawyer.
• 10+ years of relevant legal experience counseling a global company on international privacy and data protection issues; preferably includes in-house experience at a technology company with established privacy compliance protocols and experience at a top regional or global law firm.
• Expert knowledge of EMEA-region AI, privacy, and data protection laws, regulations, and compliance regimes at all levels, including familiarity with industry-specific regimes.
• Solution-oriented business and legal counselor with a growth mindset.
• Strong communication skills and collaborative team approach, leading with empathy and understanding while embracing diverse viewpoints.
• Demonstrated ability to advise and develop relationships with stakeholders across teams to establish effective solutions efficiently.
• Ability to prioritize work and provide advice under deadlines.
• Ability to draft documents, policies, messages, and other materials precisely while remaining concise and digestible for non-lawyers.
• Willingness to work flexibly at times to support a globally distributed team.
• Technical background/expertise is highly desired (a science or technical degree is not required), with a passion for technologies.

Preferred Qualifications

• Experience working with established privacy compliance protocols in a technology company environment.
• Experience across multiple EMEA jurisdictions, including regulatory familiarity beyond baseline GDPR compliance.

Compensation & Benefits

• Compensation and benefits are not specified in the provided description.

Location

• London, UK

Additional Notes

• Applicants who progress to the offer stage may be asked to attend an in-person interview within one of the organization’s offices or hubs.
• This position may require access to information protected under U.S. export control laws, including the U.S. Export Administration Regulations. Employment offers may be conditioned on authorization to receive software or technology controlled under these U.S. export laws without sponsorship for an export license.
• Reasonable accommodations are available for qualified individuals with disabilities, upon request.