Privacy and Product Counsel

Skills

About the Role

You will advise product teams on models, API features, and launches. You will lead privacy-by-design work across the model lifecycle, manage privacy documentation and international transfers, support customer privacy commitments, address regulatory matters, and build reusable privacy processes and training.

Requirements

• 5–8 years’ PQE as a qualified lawyer in an EU/EEA jurisdiction or the UK with a substantial data protection and product counselling focus
• Experience at a technology company or in a privacy or technology law practice
• Practical knowledge of GDPR, German BDSG, ePrivacy, international transfer rules, and relevant EU regulations
• Familiarity with US privacy and AI law, including CCPA/CPRA, BIPA, and state AI and deepfake statutes
• Experience advising on AI, machine learning, or data-intensive products
• Drafting skills across DPAs, privacy notices, DPIAs, and commercial privacy terms
• Written and spoken English

Responsibilities

• Advise product teams on new models, API features, and product launches
• Review marketing materials and advise on privacy matters related to marketing, analytics, partnerships, and advertising claims
• Own the GDPR programme across the model lifecycle
• Conduct DPIAs and maintain privacy documentation
• Support customer commitments, DPAs, security questionnaires, and enterprise negotiations
• Manage EU–US transfer mechanisms and privacy diligence for sub-processors and AI tooling
• Track and implement US privacy and AI-law obligations
• Handle regulatory engagement, data subject requests, complaints, incidents, and breach assessment
• Draft and maintain privacy notices, internal policies, records of processing, and compliance documentation
• Build privacy playbooks, templates, and training

Benefits

• Equity