Legal Counsel (Data Privacy & Compliance) (m/f/d) at Appinio

London, England, United Kingdom -

Full Time

Start Date

Immediate

Expiry Date

13 Apr, 26

Salary

0.0

Posted On

13 Jan, 26

Experience

2 year(s) or above

Remote Job

Yes

Telecommute

Yes

Sponsor Visa

Skills

Data Protection Compliance, GDPR, Privacy Laws, Data Processing Agreements, Data Subject Rights, Privacy-by-Design, Internal Audits, Contracting, Risk Management, Legal Drafting, Commercial Contracting, Data Breach Response, Product Compliance, AI Compliance, Stakeholder Advising, Regulatory Developments

Industry

Market Research

Description

Allow us to introduce ourselves Hello there! We’re Appinio, a global market research company that combines an AI-powered insights platform with expert consultancy. On a mission to make the world a little more fact-based, we help companies understand how consumers think and make smarter decisions. We started out in Hamburg back in 2014, but we’re now humbled to call the world our playground, with over 260 employees spread across 13 countries (we’re remote-first), 2600+ international clients, delivering research from +190 markets, globally. Want to be a part of the Appinio movement? 🚀 Here at Appinio, we value transparency in our recruitment process, and we've created a blog to share what to expect during each step of our journey together: here Your mission as a Legal Counsel (Data Protection & Compliance) We are looking for a mid-level Legal Counsel (m/f/d) to help Appinio sustain its rapid growth internationally while staying compliant and managing legal risks while cultivating business growth. This role requires someone with excellent data privacy and compliance experience in the EU and on an international scale. You will play a key role in ensuring GDPR and global data protection compliance, managing data subject rights requests, overseeing transfer mechanisms, and advising on privacy-related risks across our international operations. From negotiating Data Processing Agreements to embedding privacy-by-design principles in our products, you’ll be a trusted partner across teams and markets. This role safeguards both our legal integrity and our commercial credibility, ensuring Appinio continues to grow ethically, responsibly and sustainably. What you’ll do Data Protection Compliance Advise on EU GDPR, and other privacy laws across the UK, US, and LATAM Draft, review, and negotiate Data Processing Agreements (DPAs) and Standard Contractual Clauses (SCCs) Manage Data Subject Rights Requests (access, deletion, portability, etc.) within statutory deadlines Oversee Data Protection Impact Assessments (DPIAs) and ensure privacy-by-design in product and research processes Monitor cross-border data transfers and manage Transfer Impact Assessments (TIAs) Internal Governance & Compliance Frameworks Maintain and enhance Appinio’s internal privacy policies and compliance frameworks Conduct internal audits and risk reviews, driving continuous improvement Track new regulatory developments and translate them into actionable business guidance Contracting & Commercial Support Partner with commercial legal to ensure contracts align with privacy obligations Support due diligence processes and respond to client security and privacy questionnaires Advise on lawful use of personal data in marketing, research, and product innovation Incident & Risk Management Act as the contact point for data breach response and regulator communications Identify and mitigate privacy and compliance risks across departments Coordinate with external advisors and DPOs on high-risk or complex matters Product & AI Enablement Collaborate with Product and Data teams to ensure responsible data and AI use Review new tools, APIs, and technologies for compliance implications You will thrive in this role if You bring 3+ years of experience in privacy and data protection, ideally gained in-house You have strong knowledge of EU and German data protection law (GDPR, BDSG, TTDSG) You’re experienced in commercial contracting and general corporate compliance. Ideally, you are a fully qualified German lawyer (Volljurist) who has completed both state examinations (Zweites Staatsexamen) You're confident in advising on both EU and international level You’re confident advising internal stakeholders across Product, Research, Tech, and Commercial You have excellent legal drafting skills in German and English You’re proactive, analytical, and comfortable working independently You’re curious about the intersection of privacy, technology, and AI You are based in Europe (ideally in Germany, Spain, or the UK) What’s in it for you? Flexibility Policy - Our flexibility policy means there is no hard cap on the number of vacation days you can take Temporary work from abroad - If you're based in the EU, you can work outside your country of residence for up to 180 days per year All the hardware you need and your own MacBook If you are located in Hamburg or Berlin, you'll get a Deutschland ticket or access to a mobility budget with the NAVIT app to get you to and from the office space If you are located in Germany or Spain, you will have access to a Subsidised Urban Sports Club membership In case you’re located in one of the cities where most of our fellow Appinioneers are (Hamburg, Berlin, Munich, London, Madrid, Barcelona, or New York), you can get access to our Co-working spaces Our interview process Screening Call with our Talent Acquisition Partner Hiring Manager Interview Case Study Interview with our Head of Legal Reference Calls Stakeholder Interview with our CFO Executive Interview with our CEO Kind reminder: Please ensure that your application is submitted in English. This post not only outlines our ideal candidate but also serves as an inspiration for what this role can evolve into. Even if you consider yourself an 80% fit but have a genuine passion for this position, we encourage you to apply. We're eager to hear from individuals who share our enthusiasm. Appinio is an equal-opportunity employer. All applicants will be considered for employment without attention to race, colour, religion, sex, sexual orientation, gender identity, national origin, veteran, or disability status. Please read our privacy policy here. Learn more about us: appinio.com LinkedIn Xing Kununu Instagram

Responsibilities

The Legal Counsel will ensure GDPR and global data protection compliance while managing legal risks and supporting business growth. Responsibilities include advising on privacy laws, drafting agreements, and overseeing data subject rights requests.