Associate General Counsel, Privacy Compliance
Provides senior legal counsel on EMEA AI, privacy, and data protection regulation for a global technology company. The role requires 10+ years of relevant experience, legal qualification, strong knowledge of international privacy regimes, and the ability to advise cross-functional teams.
About the job
Responsibilities
- Serve as the subject matter expert on existing and emerging AI and data protection regulations and guidance in the EMEA region, especially jurisdictions where the company has offices.
- Advise on requirements for global cross-border data transfers.
- Collaborate with product lawyers on privacy-by-design policies.
- Advise Data and Privacy Operations on data subject requests, records of processing activities, privacy and AI impact assessments, and related matters.
- Advise on privacy and AI vendor reviews.
- Support commercial transactions counsel in negotiating data processing addenda and similar contractual language under global privacy laws.
- Support corporate legal counsel with data and privacy due diligence for M&A transactions and post-acquisition integration.
- Advise on data protection implications and legal requirements for security and privacy incidents, including incident handling and communications.
- Create and contribute to playbooks and FAQ libraries covering privacy, data governance, and responsible AI.
Requirements
- LLB/JD-equivalent degree with strong academic credentials.
- Admission to practice law in a jurisdiction where the company has an office, and/or qualification as a U.S. or UK lawyer.
- 10+ years of relevant legal experience counseling a global company on international privacy and data protection issues.
- Expert knowledge of EMEA AI, privacy, and data protection laws, regulations, and compliance regimes.
- Strong communication, collaboration, relationship-building, prioritization, and drafting skills.
- Ability to provide precise, concise, and accessible advice to non-lawyers under deadlines.
- Flexibility to work with a globally distributed team.
- Technical background or expertise is highly desired, with a demonstrated passion for technology.
Nice-to-haves
- In-house experience at a technology company with established privacy compliance protocols.
- Experience at a top regional or global law firm.
- Familiarity with industry-specific regulatory regimes.
- Experience advising on M&A privacy due diligence and post-acquisition integration.
Compensation and Benefits
- The posting does not state compensation or benefits.
Skills
Data Protection, Artificial Intelligence, Privacy Law, Cross-Border Data Transfers, Privacy By Design, Data Subject Requests, Records Of Processing Activities, Privacy Impact Assessments, Ai Impact Assessments, Vendor Reviews, Data Processing Addenda, M&A Due Diligence, Incident Response, Data Governance, Responsible Ai
Similar jobs
Legal jobs
Norm Ai
London, United Kingdom
Reviews, drafts, negotiates, and executes NDAs for institutional clients while using AI agents to improve legal workflows. Requires an England and Wales-qualified solicitor with an SRA practising certificate and 3–6 years of relevant agreement-review experience.
Coinbase
United Kingdom
Leads end-to-end Financial Crimes Compliance audits for a remote United Kingdom-based fintech environment, including scoping, fieldwork, reporting, remediation validation, and team mentoring. Requires 6+ years in audit, FCC, compliance testing, or risk management and knowledge of U.S., EU, and APAC regulations.
NMI
United StatesCorporate Counsel will advise sales and business teams on commercial agreements, privacy, compliance, governance, and broader corporate matters across US and UK operations. The role requires a licensed attorney with at least two years of experience and strong practical contract, process-improvement, and independent judgment skills.
Carta
London, United Kingdom
The Inbound KYC Analyst manages client and counterparty KYC requests, validates documentation, maintains audit-ready records, and applies evolving global AML/KYC requirements. The role requires 1–2+ years of regulatory experience, strong client communication, sound judgment, and attention to detail.
Harvey
London, United KingdomPrivacy and AI counsel supporting global privacy programs, data protection agreements, product development, and AI governance across EMEA. Requires qualification as a lawyer and at least four years of post-qualification privacy and data protection experience.