Associate General Counsel, Privacy Compliance

Cloudflare•San Francisco, CA

8d•Onsite

About The Position

Ensuring the privacy of personal information is core to Cloudflare’s mission to help build a better Internet. We’re looking for an experienced counsel to help Cloudflare navigate the complicated challenges of processing personal data amid an ever-changing and diverse regulatory landscape. Specifically, you will oversee the functions of Cloudflare’s Office of the Data Protection Officer to manage the company’s existing privacy program and ensure the company continues to comply with all applicable data protection and privacy laws, including the EU General Data Protection Regulation (“GDPR”). You will also be responsible for overseeing Cloudflare’s responsible AI program and compliance requirements stemming from AI regulations, including the EU AI Act. Your focus will be on building, implementing, and maintaining privacy program and AI program elements, including working closely with the non-lawyers on the Data and Privacy Operations team to implement these programs. We are looking for an exceptionally talented, energetic and friendly privacy attorney to join our team based in London. This role is ideal for someone who is a proactive self-starter and strategic thinker, who has a thirst for knowledge and continued growth, all while working as part of a great team. This position reports to Cloudflare’s Chief Privacy Officer.

Requirements

LLB/JD equivalent degree with strong academic credentials and admitted to practice law in one of the jurisdictions where Cloudflare has an office and/or be a U.S. or UK-qualified lawyer
10+ years of relevant legal experience counseling a global company on international privacy and data protection issues, preferably with time in-house at a technology company with established privacy compliance protocols as well as at a top regional or global law firm
Expert knowledge of EMEA-region AI, privacy, and data protection laws, regulations and compliance regimes at all levels, including familiarity with industry-specific regimes
Solution-oriented business and legal counselor with a growth mindset and strong sense of humor
Strong communication skills and cooperative team player. Lead with empathy and understanding while embracing diverse points of view.
Flexibility to adapt and thrive in a fast paced environment.
Demonstrated ability and strong desire to effectively advise, develop relationships, and work collaboratively with stakeholders across teams to establish effective solutions efficiently and in an amenable manner
Experience prioritizing work and providing advice under deadlines
Ability to draft documents, policies, messages and anything else in a precise manner, while still being concise and digestible for non-lawyers
A willingness to work flexibly on occasion to accommodate working with a globally distributed team

Nice To Haves

Technical background / expertise is highly desired – while a science or technical degree is not a prerequisite for this job, a passion for technologies is

Responsibilities

Be the subject matter expert on existing and emerging AI and data protection regulations or guidance in the EMEA region, with a focus on the jurisdictions where Cloudflare has offices (multiple locations in the EU, UK, Switzerland, and UAE). You will work collaboratively across multiple functions to advise on the impact of such regulations or guidance on Cloudflare’s business.
Understand and advise on the requirements related to cross-border data transfers globally.
Collaborate with and advise product lawyers on Cloudflare’s privacy by design policies.
Advise the Data and Privacy Operations team on handling data subject requests, records of processing activities, privacy and AI impact assessments, and more.
Advise the Data and Privacy Operations team on conducting and approving privacy and AI vendor reviews.
Support the commercial transactions legal team in negotiating data processing addendums and similar contractual language under global privacy laws.
Support the corporate legal team on data and privacy-related due diligence for M&A transactions as well as supporting post-acquisition integration tasks related to privacy and AI compliance.
Advise on data protection implications of and legal requirements applicable to security and privacy incidents, exercising judgment and discretion while advising cross-functional teams on incident handling procedures and communications.
Create and contribute to playbooks and FAQ libraries for various teams to ensure they have the most current guidance related to privacy, data governance, and responsible AI.