World

Senior Counsel, Privacy & Data Protection Officer (EU/UK)

7.0/10

World

Not specified
Office / on-site
senior
12 days ago
aitechprivacydata protectionGDPRUK GDPRAIcybersecuritytechnology regulation

AI Summary

The vacancy is strong in task clarity and company profile but lacks compensation details.

Check Match — Just drop your CV

See your fit for Senior Counsel, Privacy & Data Protection Officer (EU/UK) in seconds.

Description

Privacy & Product Counseling

  • Drive the development and execution of the company’s strategies to address evolving global privacy, data governance, and AI regulatory requirements.
  • Advise on privacy-by-design and data protection-by-design principles across the full range of TFH products, services, and technologies.
  • Lead drafting, review, and maintenance of privacy notices, policies, disclosures, consent frameworks, and internal governance documentation.
  • Provide practical and strategic legal guidance on GDPR, UK GDPR, ePrivacy, AI regulation, biometrics, digital identity, cross-border transfers, marketing, cookies, and emerging global privacy frameworks.
  • Partner closely with product, engineering, security, policy, communications, and business teams to support innovative product development while managing legal and regulatory risk.
  • Oversee and support Data Protection Impact Assessments (DPIAs), Legitimate Interest Assessments (LIAs), vendor reviews, and records of processing activities (ROPAs).
  • Respond to and manage privacy-related regulatory inquiries, investigations, audits, and enforcement matters globally.
  • Support incident response, breach assessment, notification obligations, and remediation efforts in coordination with Security and Compliance teams.
  • Develop scalable privacy resources, templates, training materials, and operational tools that enable teams across the company to provide consistent and durable guidance.

Data Protection Officer Responsibilities (EU & UK)

  • Serve as the designated **Data Protection Officer** for relevant EU and UK entities.
  • Monitor organizational compliance with applicable data protection laws, regulations, policies, and standards.
  • Advise the company and internal stakeholders on obligations under GDPR, UK GDPR, CCPA and other global data protection frameworks.
  • Act as the primary point of contact for EU and UK supervisory authorities and cooperate with regulators on data protection matters.
  • Serve as a contact point for data subjects regarding the exercise of their privacy rights and inquiries relating to personal data processing.
  • Independently monitor compliance efforts, including audits, risk assessments, training initiatives, and governance processes.
  • Provide guidance on international data transfer mechanisms, including SCCs, transfer impact assessments, and evolving EU/UK transfer requirements.
  • Support the ongoing development and maturity of the company’s global privacy governance framework and accountability program.

Requirements

Minimum Qualifications

  • Fully qualified lawyer in Germany, another EU jurisdiction, the UK, or the United States (or equivalent foreign qualification).
  • Ability to serve as Data Protection Officer under GDPR and UK GDPR requirements.
  • 8+ years of legal experience, including experience at a law firm, in-house legal department, and/or government authority.
  • Significant experience advising on global privacy laws, regulations, and compliance frameworks, particularly in the technology, internet, social media, AI, or digital products sectors.
  • Experience advising on privacy legal risks, mitigations, governance structures, and operational compliance programs.
  • Experience handling regulatory investigations and interactions with data protection authorities.
  • Experience working cross-functionally on multiple complex projects in fast-paced environments.
  • Excellent problem-solving, client counseling, and stakeholder management skills.
  • Fluent in German and English, other languages are a plus.

Preferred Qualifications

  • Prior experience serving as a Data Protection Officer or deputy DPO.
  • In-house experience at a multinational technology company.
  • Familiarity with AI governance, biometric data regulation, blockchain technologies, and cryptocurrency-related legal issues.
  • Working proficiency in German and/or additional European languages.
  • Relevant privacy certifications (e.g., CIPP/E, CIPM, CIPT) are a plus.
Loading similar jobs...