Senior Privacy Counsel
Provides strategic, product-focused EU privacy counseling for Pinterest products, advising Product and Engineering teams on GDPR, ePrivacy, risk assessments, privacy-by-design, and international data transfers. Requires qualification to practice law and significant post-qualification privacy experience.
About the job
Responsibilities
- Provide end-to-end EU privacy product counseling for new products and feature launches, from early design through launch and iteration.
- Advise on GDPR, ePrivacy, the Digital Services Act (DSA), and EU AI Act topics, including lawful bases, transparency, consent and choice design, profiling and personalization, data minimization, retention, and data subject rights.
- Lead and support privacy risk assessments, including DPIAs, and drive mitigations and decision documentation with cross-functional teams.
- Partner with Product and Engineering to operationalize privacy-by-design and scalable privacy controls, including consent enforcement, data access controls, and retention/deletion approaches.
- Provide guidance on EU data sharing, vendor and partner arrangements, privacy terms, and data protection addenda.
- Advise on international data transfers for EU data flows, including compliant transfer mechanisms and risk mitigations.
- Develop scalable privacy workflows, templates, and playbooks for consistent privacy reviews.
- Collaborate on privacy issues arising from incidents, complaints, or escalations and drive process improvements.
- Use AI-enabled tools responsibly to improve privacy counseling and program workflows while maintaining legal oversight and quality control.
Requirements
- Qualified to practice law in the jurisdiction of residence or hold an equivalent EU qualification.
- Significant post-qualification legal experience in privacy, including substantial experience counseling on EU privacy law.
- Strong GDPR knowledge; ePrivacy experience strongly preferred.
- Product counseling experience in a fast-paced environment, translating legal requirements into practical guidance for Legal, Product, and Engineering teams.
- Experience leading or materially supporting DPIAs or privacy risk assessments and driving cross-functional mitigations.
- Understanding of product data flows, analytics, SDKs, APIs, and tracking/measurement concepts sufficient to advise on privacy-by-design.
- Excellent judgment, integrity, written and verbal communication, and interpersonal skills.
- Strong cross-functional collaboration, project management, independence, and attention to detail.
- Ability to use AI and technology tools effectively and responsibly, or willingness to learn.
Nice to haves
- Experience with complex, multi-jurisdictional legal and compliance issues at a technology company or similarly dynamic environment.
- Familiarity with international data transfer mechanisms, including Standard Contractual Clauses (SCCs) and transfer risk assessments.
Compensation
- Base salary: €98,959–€173,178.
- Eligible for equity.
Skills
GDPR, Eprivacy, Digital Services Act, Eu Ai Act, Dpias, Privacy By Design, Data Protection Addenda, Standard Contractual Clauses, Transfer Risk Assessments, Data Access Controls, APIs, SDKs, Data Retention
Similar jobs
Legal jobsProvides first-line legal counsel on AI safety, security, trust and safety, incidents, enforcement, and regulatory matters across EMEA. The role requires legal qualification, high-stakes investigations or crisis experience, technical fluency, and preferably 8+ years of relevant practice.
Provides first-line legal counsel on AI safety, security, trust and safety policies, investigations, escalations, and incidents. The role requires a JD, U.S. bar membership, high-stakes legal experience, technical fluency, and strong judgment under uncertainty.
Supports the Chief Compliance Officer by overseeing regulatory compliance across business lines, maintaining policies and controls, reviewing communications, and coordinating examinations and filings. Requires 7+ years of broker-dealer compliance experience, strong FINRA/SEC knowledge, and Series 7 and 24 licenses.
The Compliance Manager will advise on complex crypto and stablecoin compliance matters, partner with business and GTM teams, and shape automated, agentic compliance solutions. The role requires 9+ years of financial crimes compliance experience, strong commercial judgment, and technical fluency.
Senior counsel will advise international Public Sector teams on compliance, government contracting, and procurement risks across EMEA and other markets. The role requires qualified legal counsel with several years of post-qualification experience, strong cross-jurisdictional judgment, and the ability to build scalable compliance guidance.