Privacy Counsel — Compliance & Regulatory

Senior privacy counsel role based in London, Brussels or Paris supporting a global law firm's Office of General Counsel. The role will lead and support the development, implementation and ongoing operation of the organisation's privacy programme to ensure compliance with EU/UK GDPR, applicable US state and federal rules and other international privacy laws.

Responsibilities include conducting DPIAs/PRAs, responding to data subject and regulator requests, managing data incidents and breach response, drafting and negotiating data processing and transfer agreements, delivering privacy training and advising on privacy implications of new technologies (including generative AI) and vendor arrangements. The role will liaise with internal stakeholders across legal, operations, IT, security and procurement and may act as a statutory DPO where required.

• Qualified lawyer with valid licence to practise and a law degree.
• Minimum six (6) years' relevant experience in privacy/data protection.
• Strong practical knowledge of EU/UK GDPR and experience with cross‑border data transfers and privacy clauses in contracts.
• Proven experience handling data incidents, DSARs and regulator engagement.
• Experience advising global organisations or within a global professional services/regulated business environment; law firm in-house experience preferred.
• Privacy certifications (e.g. CIPP/CIPT) preferred; strong stakeholder engagement and project management skills.