Associate General Counsel, Privacy Compliance

About This RoleAI processing…

Key Responsibilities

• 1
  Be the subject matter expert on existing and emerging AI and data protection regulations or guidance in the EMEA region, with a focus on the jurisdictions where Cloudflare has offices (multiple locations in the EU, UK, Switzerland, and UAE). You will work collaboratively across multiple functions to advise on the impact of such regulations or guidance on Cloudflare’s business.
• 2
  Understand and advise on the requirements related to cross-border data transfers globally.
• 3
  Collaborate with and advise product lawyers on Cloudflare’s privacy by design policies.
• 4
  Advise the Data and Privacy Operations team on handling data subject requests, records of processing activities, privacy and AI impact assessments, and more.
• 5
  Advise the Data and Privacy Operations team on conducting and approving privacy and AI vendor reviews.
• 6
  Support the commercial transactions legal team in negotiating data processing addendums and similar contractual language under global privacy laws.
• 7
  Support the corporate legal team on data and privacy-related due diligence for M&A transactions as well as supporting post-acquisition integration tasks related to privacy and AI compliance.
• 8
  Advise on data protection implications of and legal requirements applicable to security and privacy incidents, exercising judgment and discretion while advising cross-functional teams on incident handling procedures and communications.
• 9
  Create and contribute to playbooks and FAQ libraries for various teams to ensure they have the most current guidance related to privacy, data governance, and responsible AI.

Requirements

• LLB/JD equivalent degree with strong academic credentials and admitted to practice law in one of the jurisdictions where Cloudflare has an office and/or be a U.S. or UK-qualified lawyer
• 10+ years of relevant legal experience counseling a global company on international privacy and data protection issues, preferably with time in-house at a technology company with established privacy compliance protocols as well as at a top regional or global law firm
• Expert knowledge of EMEA-region AI, privacy, and data protection laws, regulations and compliance regimes at all levels, including familiarity with industry-specific regimes
• Solution-oriented business and legal counselor with a growth mindset and strong sense of humor
• Strong communication skills and cooperative team player. Lead with empathy and understanding while embracing diverse points of view. Flexibility to adapt and thrive in a fast paced environment.
• Demonstrated ability and strong desire to effectively advise, develop relationships, and work collaboratively with stakeholders across teams to establish effective solutions efficiently and in an amenable manner
• Experience prioritizing work and providing advice under deadlines
• Ability to draft documents, policies, messages and anything else in a precise manner, while still being concise and digestible for non-lawyers
• A willingness to work flexibly on occasion to accommodate working with a globally distributed team
• Technical background / expertise is highly desired – while a science or technical degree is not a prerequisite for this job, a passion for technologies is

Perks & BenefitsTypical for this role