Privacy Counsel at Tripledot Studios

Tripledot Studios Limited; Barcelona; Hybrid; EUR 120,000 - 180,000; Full time

Benefits offered by this job

25 days of paid holiday

20 remote working days per year

Private medical cover

Life and critical illness cover

Family forming support

Employee assistance program

Sport compensation

Meal and transport vouchers

English and Spanish classes

Job summary

Tripledot Studios, Barcelona, is seeking a senior Privacy Counsel to build and lead the company’s global privacy program in a fast‑growing mobile gaming environment. You will shape policies, advise cross‑functional teams, and navigate GDPR, CCPA/CPRA, and other evolving laws across multiple jurisdictions.

The role demands strategic leadership, hands‑on regulatory experience, and a track record of handling cross‑border data transfers, DPIAs, and DSARs while aligning privacy with business goals.

Qualifications

• EU/UK/US qualified lawyer with minimum 7+ years of applicable experience.
• Strong generalist capabilities across privacy, data protection, and regulatory matters.
• Experience with consumer-facing technology monetized via ads and in-app purchases; gaming industry experience a plus.
• Knowledge of GDPR, UK GDPR, CCPA/CPRA and emerging US state privacy laws.

Responsibilities

• Build the global privacy program and data protection infrastructure.
• Advise on regulatory risks across Europe, US, and beyond.
• Conduct DPAs, DPIAs, privacy reviews, and manage DSAR responses.
• Collaborate with product, marketing and engineering on privacy-by-design features.
• Lead regulatory investigations and privacy strategy across jurisdictions.

Skills

EU/UK/US qualified

7+ years experience

privacy law

mobile apps privacy

Education

EU/UK/US qualified lawyer

Job description

This opportunity was posted more than 30 days ago and no application deadline was provided. You can explore active listings below.

Privacy Counsel at Tripledot Studios

T

Organising Institution / Firm

Not Specified by Organiser

Barcelona, Spain

Not Specified

EU/UK/US qualified lawyer with minimum of 7+ years of applicable experience. Strong generalist capabilities. Combination of law firm and in-house exposure viewed favorably. Experience with consumer-facing technology monetized with ads and in-app purchases; video game industry experience is a plus. Strong working knowledge of GDPR, UK GDPR, CCPA/CPRA and emerging US state privacy laws. Experience advising on mobile app privacy issues, including consent management, children's privacy (COPPA, age-appropriate design), advertising/analytics technologies, and cross-border data transfers. Experience conducting DPIAs, managing data subject requests, negotiating data processing agreements, and handling regulatory inquiries/enforcement actions. Outstanding written and verbal communication skills in English. Proven ability to lead complex projects across multiple jurisdictions.

Job

Full Opportunity Brief

Privacy Counsel at Tripledot Studios: A Career-Defining Move in Mobile Gaming Law

The legal industry is witnessing a seismic shift as privacy and data protection become boardroom priorities across the globe. For senior lawyers with a passion for technology, the Privacy Counsel role at Tripledot Studios in Barcelona offers an extraordinary opportunity to step into the engine room of the mobile gaming world. With over 2,500 employees across 12 studios and 25 million daily active users, Tripledot is not just another gaming company; it is a global powerhouse seeking a legal architect to build its privacy framework from the ground up.

This is not a typical compliance role. The successful candidate will be entrusted with shaping the entire privacy and data protection practice of the in‑house legal team during a period of remarkable growth. For lawyers who thrive on responsibility, strategic influence, and cutting‑edge legal challenges, this position represents a rare blend of senior‑level accountability and entrepreneurial freedom. The role is based in Barcelona, a vibrant European tech hub, yet it carries a truly global mandate—covering digital markets, platform providers, and data protection authorities across multiple jurisdictions.

Tripledot's guiding principle is that when people love what they do, what they do will be loved by others. This ethos extends to their legal team, where the Privacy Counsel will not simply be a gatekeeper but a strategic partner driving the company's success.

Why In-House Privacy Counsel Is One of the Most Demanding Legal Careers Right Now

The days when privacy law was a niche practice are long gone. Today, every consumer‑facing digital product must navigate a labyrinth of regulations, from the EU's General Data Protection Regulation (GDPR) to the California Consumer Privacy Act (CCPA/CPRA) and a patchwork of emerging state laws in the US. The mobile gaming sector sits at the intersection of these challenges: it involves vast amounts of personal data, children's privacy concerns, behavioral advertising, cross‑border data flows, and in‑app purchase ecosystems.

For a privacy lawyer, this means the role is never static. You must balance legal compliance with commercial pragmatism, all while advising product teams on how to innovate without crossing regulatory lines. Tripledot's decision to hire a dedicated Privacy Counsel reflects a broader industry trend: gaming companies are no longer treating privacy as a checkbox exercise but as a competitive advantage. By embedding privacy‑by‑design into new products and features, the counsel will directly influence how millions of users interact with the company's games.

This position also offers a unique platform for personal and professional growth. The job posting explicitly mentions the opportunity to build and shape the privacy practice, meaning the successful candidate will have significant ownership over policies, procedures, and strategic direction. For lawyers coming from private practice, this is a chance to transition into a role with tangible business impact, while those already in‑house will find an environment where their expertise is valued at the highest levels.

Inside the Job: Key Responsibilities That Will Define Your Day-to-Day

The responsibilities outlined in the job description are both comprehensive and challenging, offering a clear picture of what a modern privacy counsel actually does in a fast‑paced tech company:

• Building the global privacy program: This goes beyond drafting policies—it means designing the entire data protection infrastructure of the company, from data mapping to vendor management.
• Advising on regulatory risks: You will monitor and advise on privacy risks across digital markets and platforms, which requires staying current on laws in Europe, the US, and beyond.
• Conducting DPIAs and privacy reviews: Data Protection Impact Assessments are a key tool for embedding privacy‑by‑design into every new product feature, especially those involving children or large‑scale data profiling.
• Collaborating with product, marketing, and engineering: The legal team is not a silo; you will work side‑by‑side with technical teams to review features and identify privacy risks before they become costly issues.
• Handling data subject requests and breach responses: From access requests to incident management, you will be the first line of defense when things go wrong.
• Negotiating data processing agreements: Managing privacy obligations with vendors, partners, and platform providers is a core part of the role, requiring both legal expertise and commercial dexterity.
• Managing regulatory investigations: If a data protection authority comes knocking, you will lead the company's strategic response—a critical function that can make or break a business's reputation.

These duties reflect a role that is equal parts strategist, technician, and crisis manager. The job demands a lawyer who can think on their feet, communicate complex legal concepts in plain English, and navigate the often‑conflicting demands of innovation and regulation.

Who Should Apply? Dissecting the Eligibility and Skills Matrix

Tripledot has set a high bar for applicants, and for good reason. The role requires an EU/UK/US qualified lawyer with a minimum of 7+ years of applicable experience. This is not a stepping‑stone role for junior associates; it is a senior position for seasoned professionals who have cut their teeth on complex data protection issues. The job posting also emphasizes strong generalist capabilities—meaning you should be comfortable handling a wide range of legal matters beyond privacy, even though privacy will be your primary focus.

Ideally, you will have experience in both law firm and in‑house settings. The former gives you rigorous analytical training; the latter teaches you how to be pragmatic and business‑oriented. Tripledot explicitly looks for lawyers who have worked with consumer‑facing technology monetized through ads and in‑app purchases. If you have video game industry experience, consider that a major plus—it demonstrates you understand the unique user dynamics and revenue models at play.

On the technical side, you need a working knowledge of GDPR, UK GDPR, CCPA/CPRA, and other emerging US state privacy laws. But the job posting goes deeper, asking for experience with mobile app‑specific issues such as consent management, children's privacy (COPPA and age‑appropriate design), advertising and analytics technologies, and cross‑border data transfers. This is not just about knowing the law; it is about applying it to real‑world product decisions.

One of the most telling requirements is the proven ability to lead complicated projects and advise across multiple jurisdictions. This signals that the Privacy Counsel will be expected to operate with a high degree of autonomy and complexity from day one.

The personal attributes listed—proactiveness, drive, accountability, business acumen, pragmatism, resourcefulness, curiosity, excellence, positivity, work ethic, and professionalism—are not merely boilerplate. They describe a lawyer who can thrive in a culture that celebrates intelligent risk‑taking and a love for making games. Tripledot is a company where people are passionate about their work, and they want a counsel who shares that passion.

Working at Tripledot: Benefits, Culture, and the Barcelona Advantage

Beyond the role itself, Tripledot offers an impressive array of benefits designed to support both professional and personal well‑being. The 25 days of paid holiday (plus bank holidays) is generous by any standard, and the hybrid working model provides flexibility that many legal roles still lack. Even more appealing is the 20 days of remote working per year, allowing you to work from anywhere in the world or convert those days into additional WFH days when needed.

Other benefits include private medical cover, life and critical illness cover, family forming support, an employee assistance program, sport compensation, meal and transport vouchers, and English and Spanish classes. The emphasis on continuous professional development is particularly attractive for lawyers who want to keep growing, whether through formal training, conferences, or on‑the‑job exposure to new legal challenges.

Barcelona itself is a compelling reason to consider this role. As one of Europe's leading tech and startup hubs, the city offers a unique blend of Mediterranean lifestyle and cutting‑edge innovation. You will be joining a legal community that is increasingly focused on tech, data, and digital rights, making it an ideal environment for networking and collaboration. For lawyers relocating from the UK or US, Spain's vibrant culture, excellent weather, and strong infrastructure make the transition not just manageable but genuinely enjoyable.

FAQs

1. What is the most important qualification for this Privacy Counsel role at Tripledot Studios?

While the 7+ years of experience and EU/UK/US qualification are non‑negotiable, the most critical differentiator is hands‑on experience with global privacy laws applied to consumer‑facing technology. Tripledot specifically values candidates who have worked on mobile apps, including consent management, children's privacy, and cross‑border data transfers. Demonstrating concrete examples of how you have handled these issues will strengthen your application significantly.

2. Is this role open to lawyers who are not based in Spain?

The job posting is for a position based in Barcelona, but given the hybrid working model and Tripledot's global footprint, relocation support may be possible for the right candidate. The posting does not explicitly mention sponsorship, so you should apply and clarify this with the recruitment team. From a legal qualification standpoint, EU/UK/US qualified lawyers are welcome to apply, regardless of current location.

3. What does 'privacy‑by‑design' mean in the context of a mobile gaming company?

Privacy‑by‑design means integrating data protection and privacy considerations into the development of products and features from the very beginning, rather than adding them as an afterthought. For Tripledot, this could involve building systems that minimize data collection by default, obtaining age‑appropriate consent for children, and ensuring any new advertising technology does not violate GDPR or CCPA requirements. As Privacy Counsel, you would be the person guiding these decisions.

4. What are the biggest challenges likely to be faced in this role?

The biggest challenges include navigating the fragmented and rapidly evolving privacy laws across multiple jurisdictions, especially the interplay between GDPR and U.S. state laws. Additionally, managing data subject requests at large scale and responding to regulatory investigations require both legal acumen and crisis management skills. Balancing these compliance demands while supporting the business's need to launch popular games quickly will require the pragmatism and resourcefulness that Tripledot values.