Privacy Counsel, Germany

Waymo LLC; München; Hybrid; EUR 150,000 - 190,000; Full time

Job summary

Waymo LLC seeks an experienced Privacy Counsel to lead EU and Germany privacy, data protection, and regulatory compliance. You will partner with product, engineering, and policy teams to design privacy-friendly solutions while ensuring GDPR and BDSG alignment.

Your role includes DPIAs, DPA interactions, and incident response across Europe. The position requires a JD or EU-equivalent, 7+ years of privacy experience, fluent German and English, and a track record of translating legal requirements

Qualifications

• Juris Doctor and German/EU bar qualification or equivalent.
• 7+ years of legal experience in European privacy, data protection, and regulatory compliance.
• Deep knowledge of GDPR and German data protection laws (BDSG).
• Experience engaging with DPAs and regulatory bodies on data protection matters.
• Fluency in German and English, with ability to communicate risk to leaders and engineers.

Responsibilities

• Serve as privacy counsel for Waymo operations, launches, and engineering in Germany and the EU.
• Advise on Privacy by Design and data minimization for market entry and products.
• Lead relationships with EU DPAs, DPIAs, audits, and data protection reviews.
• Coordinate rapid local legal responses to EU data incidents and regulatory risk.
• Collaborate with Public Policy, Trust & Safety, and Regulatory Affairs on EU privacy legislation.

Skills

Privacy law

German & English

Regulatory compliance

DPAs engagement

Cross-functional collaboration

Education

Juris Doctor or EU equivalent

Job description

Waymo is an autonomous driving technology company with the mission to be the world's most trusted driver. Since its start as the Google Self-Driving Car Project in 2009, Waymo has focused on building the Waymo Driver—The World's Most Experienced Driver™—to improve access to mobility while saving thousands of lives now lost to traffic crashes. The Waymo Driver powers Waymo’s fully autonomous ride-hail service and can also be applied to a range of vehicle platforms and product use cases. The Waymo Driver has provided over ten million rider-only trips, enabled by its experience autonomously driving over 100 million miles on public roads and tens of billions in simulation across 15+ U.S. states.

As part of Waymo's Legal team, you will work on the exciting legal issues surrounding our transformational autonomous driving technology and help drive our business lines forward from technology ideation through scaled commercial deployment. We partner with our public policy, safety, security and privacy experts to define transportation policy for the autonomous driving world to come, advising on regulatory changes that support and protect our users around the world. We collaborate with our engineering, product, strategy and operations teams to develop and protect our intellectual property portfolio and drive our corporate and commercial transactions. We ensure compliance with an increasingly complex and dynamic range of global regulations. And we anticipate, mitigate, and litigate high-profile and precedent-setting legal matters.

In this hybrid role, you will report into our Managing Counsel.

You Will

• Serve as the primary, on-the-ground Privacy Counsel for Waymo's operations, product launches, and engineering initiatives across Germany and the broader EU, acting as a trusted advisor to ensure compliance with GDPR, ePrivacy, and local laws like the BDSG.
• Advise on "Privacy by Design" and data minimization principles for European market entry, working directly with Product, Engineering, and AI/ML teams to design innovative privacy solutions for complex sensor data and model training.
• Proactively build and maintain constructive relationships with EU Data Protection Authorities (DPAs), acting as the primary legal contact for regulatory inquiries, data protection impact assessments (DPIAs), audits, and ongoing local engagement.
• Lead rapid, localized legal response for any EU data incidents, coordinating internal investigations and compliance reviews, managing strict notification timelines, and mitigating regulatory risk.
• Partner with Waymo’s Public Policy, Trust & Safety, and Regulatory Affairs teams to monitor, review, and help shape emerging European privacy legislation, developing advocacy strategies to influence policy changes that support responsible innovation.

You Have

• A Juris Doctor (or equivalent law degree) and active qualification to practice law in Germany (e.g., Volljurist) or another relevant EU jurisdiction.
• 7+ years of legal experience with significant expertise in European privacy, data protection, and regulatory compliance, preferably in-house at a global technology company.
• Deep, practical expertise in the General Data Protection Regulation (GDPR) and German national data protection laws (BDSG), with a track record of operationalizing these frameworks for complex data flows.
• Direct experience engaging with European Data Protection Authorities (DPAs) and working with government or regulatory bodies to navigate rulemaking processes and compliance readiness.
• Experience advising on cross-border data transfers, international data governance, and translating strict legal requirements into practical engineering specifications.
• Professional fluency in both German and English, with exceptional ability to communicate legal risks clearly to leadership and technical teams in the face of ambiguity.

We Prefer

• Recognized European privacy certifications, such as CIPP/E, CIPM, or CIPT.
• Prior in-house experience at a US-based multinational technology company, autonomous vehicle developer, or AI-focused enterprise navigating EU expansion.
• Hands-on experience advising on the intersection of GDPR with emerging European technology and data regulations (e.g., the AI Act, Data Act), including experience providing counsel on proposed legislation.
• Experience structuring and defending main establishment strategies (One-Stop-Shop) and data transfer frameworks for EU resident data.
• Background in responding to privacy litigation, localized incident response, or managing comprehensive privacy compliance audits.
• A technical background or strong fluency in data infrastructure, cloud computing, computer vision, or software engineering.