Legal Counsel - Privacy - EMEA

TN United Kingdom; London; On-site; GBP 40,000 - 80,000; Full time

Job description

Come and be part of the exciting travel tech industry at Expedia Group! Expedia is seeking a dynamic, pragmatic junior lawyer, with a passion for privacy and technology, to support the global privacy legal team, based in Seattle, London, and Singapore. This team advises all brands and business groups across Expedia Group on compliance with privacy laws and regulations around the world and is on the cutting edge of changes in law and technology – advising on AI and machine learning, the changing world of AdTech, the growth of Privacy Enhancing Technology, and much more.

This position is part of the Expedia Legal and Corporate Affairs team, a globally-oriented legal team that is proactive, collaborative and highly respected, where you will work closely with internal clients in a fast-paced and exciting environment. This position is based in London.

What You’ll Do:

1. Take ownership for delivering best in class privacy advice to our internal clients across Human Resources, Marketing Services, Procurement, B2C and B2B business teams, including leading and playing a key part in:
2. Assessing and advising on privacy risks directly to the business and other legal stakeholders, including completing DPIAs, LIAs and PIAs
3. Reviewing, drafting and negotiating privacy constructs and contractual obligations (eg DPAs) between us and third parties, including procurement vendors, travel suppliers, affiliates, ad tech partners, HR providers and connectivity providers
4. Maintaining and developing our suite of privacy templates that regulate our various contractual relationships with third parties, and updating our negotiation guides for the legal function to be able to self-serve
5. Ensuring we stay up to date and compliant with global changes in privacy and related laws, including cross-border data transfers, and updating our position swiftly and appropriately as required
6. Ensuring that our internal governance arrangements are maintained and updated appropriately, including ROPAs and Internal Governance Agreements and certifications.
7. Create and provide guides and training to legal team members, clients, and cross-functional stakeholders on privacy to ensure consistent and clear guidance on applicable laws, regulations, and relevant self-regulatory frameworks
8. Track new laws, guidance and enforcement action to help analyze and communicate the implications of changing European and international laws and regulations to business teams and colleagues
9. Educate and advocate for privacy and data protection in cross-functional forums.
10. Lead work to develop and deliver best in class privacy and data protection training initiatives across the company
11. Draft consumer, B2B, and employee privacy notices, privacy policies and regulatory filings
12. Create, maintain and improve content across Confluence, our online Legal Centre and other online resources
13. Draft internal policies and standards
14. Advise on managing privacy rights across Expedia
15. Embed our Responsible AI policies, standards and practices in your work
16. Assist with security incidents response
17. Advise on marketing-based initiatives

Who You Are:

You have excellent communication and interpersonal skills and a desire for continuous self-improvement. You are a quick learner, you thrive in a team environment and you look for opportunities to take initiative. You solve legal problems in innovative and commercially savvy ways and partner strongly with your business and legal colleagues. Plus:

1. You have a Bachelors or Masters in Law / equivalent relevant experience
2. LPC or equivalent and training contract completed
3. At least 1-2 years relevant privacy experience as a practicing lawyer in a top law firm and/or in a fast-paced in-house legal environment (technology background preferred) and current practicing certificate
4. Experience in a global legal department with international privacy issues desired
5. Good understanding of e-commerce technologies and business models, including location-based services, behavioral targeting, online advertising and understanding of how privacy law and regulations apply
6. Ability to assess and communicate risk within the context of business-driven goals
7. Ability to work on a wide range of matters with minimal supervision
8. Ability to contextualize commercial risks, priorities and considerations
9. Ability to use/learn to use digital tools as part of work, e.g. confluence, Jira, html
10. Experience and interest in AI and emerging technologies and intersection with privacy concerns
11. Record of establishing positive working relationships with business clients and legal colleagues
12. Excellent skills in SharePoint, Office Suite including Excel, Confluence, JIRA