Senior Legal Counsel - Data Protection & Privacy

sky; Hounslow; On-site; GBP 90,000 - 130,000; Full time

Job summary

Sky is seeking a Senior Legal Counsel for Data Protection & Privacy to support Sky's data protection strategy and governance, with a focus on AI adoption and usage. The role involves advising on UK/EU GDPR, ePrivacy and related laws, translating requirements into practical guidance, and enabling scalable governance across the business.

The candidate will work with Legal, Data Protection Operations, Cyber, Technology, Sky Data and Commercial teams to ensure compliant, responsible data use that

Qualifications

• UK or equivalent qualified lawyer with significant post-qualification experience advising on complex UK and EU data protection matters.
• Proven track record of advising on and implementing legally defensible solutions for complex AI, machine learning and advanced data use cases.
• Demonstrable experience influencing senior stakeholders and shaping strategic decisions on privacy initiatives.
• Deep expertise in UK GDPR, EU GDPR and privacy by design principles.

Responsibilities

• Provide high-quality legal advice on UK GDPR, EU GDPR, ePrivacy and AI-related privacy issues.
• Lead or support the Head Counsel on complex, high-risk and strategic matters.
• Advise on DPIAs, LIAs, data sharing, international transfers and high-risk processing activities.
• Collaborate with cross-market legal and DP teams to align standards.
• Engage with regulators (ICO, DPC) as needed.

Skills

UK GDPR

EU GDPR

AI data use

Stakeholder influence

Education

UK-qualified lawyer

Job description

Senior Legal Counsel - Data Protection & Privacy

This is a senior legal role within Sky's Group Data Privacy function, supporting the delivery of Sky's data protection strategy and governance framework with a specific focus on AI adoption and usage.

Reporting to the Head Counsel - Data Protection & Privacy, you will play a key role in advising on complex UK and EU data protection matters, translating legal requirements into practical, operational guidance and supporting the implementation of scalable governance across the business.

You will work across a broad range of data, digital and AI-related issues, partnering closely with Legal, Data Protection Operations, Cyber, Technology, Sky Data and Commercial teams to ensure that Sky's data use is compliant, responsible and enables innovation and growth.

The role also supports cross-market alignment across the UK, Ireland and Italy, helping to embed consistent legal standards while recognising local regulatory requirements.

What You'll Do

Legal Advice & Support

• Provide high-quality, pragmatic legal advice on UK GDPR, EU GDPR, ePrivacy, AI-related privacy issues and related data protection laws in connection with Sky's use of customer, workforce and contributor data.
• Lead or support the Head Counsel on complex, high-risk and strategic matters, including product launches, commercial initiatives and regulatory issues.
• Provide practical, risk-based advice to business stakeholders on BAU data protection issues.
• Support the development of clear, defensible legal positions and documentation.

AI & Emerging Regulation

• Lead or materially contribute to legal assessment and practical solutions for complex AI and data-driven use cases, ensuring compliance with GDPR, privacy by design principles and emerging AI regulation while enabling responsible innovation.
• Support Sky's readiness for the EU AI Act, cyber regulation and other emerging digital regulation.
• Develop creative, pragmatic and legally defensible approaches to novel AI, , cyber and digital regulatory challenges, balancing regulatory risk with commercial objectives.
• Contribute to horizon scanning and translate regulatory developments into practical guidance.

Legal Governance & Framework Implementation

• Support the implementation of the Group's data protection legal framework across business areas.
• Advise on DPIAs, LIAs, data sharing, international transfers, retention and high-risk processing activities.
• Help ensure consistency and quality in legal advice and decision‑making across teams.
• Identify recurring risk themes and support remediation and process improvement.

Partnership with Data Protection Operations

• Work closely with the DPO and DP Operations teams and related business operational teams to align legal requirements with operational processes.
• Support the embedding of scalable policies, controls and governance mechanisms.
• Advise on data incident and breach response where required.
• Help define and apply legal guardrails and escalation thresholds in practice.
• Contribute to a "one privacy function" approach across legal and operational teams.

Consent, Marketing & Digital

• Advise on consent frameworks, customer preferences and marketing practices.
• Support legal oversight of digital products, advertising technology and data-driven use cases.
• Ensure compliance with legal and regulatory expectations on transparency, fairness and customer rights.

Cross-Market Collaboration

• Work with local market legal and DP teams in Ireland and Italy to support consistent application of standards.
• Provide input on cross-border data protection issues and regulatory developments.
• Help promote best practice and knowledge sharing across markets.

Regulatory & Risk Support

• Support engagement with regulators (e.g. ICO, DPC) including responses to queries and investigations.
• Assist with regulatory submissions and documentation.
• Ensure robust record-keeping and defensible decision‑making.

Team Contribution & Development

• Contribute to a collaborative, high-performing and inclusive team culture aligned with Sky's Values.
• Provide coaching and support to junior team members where appropriate.
• Build strong relationships with stakeholders across Legal and the wider business.
• Support delivery of the Data Privacy team's objectives and broader Legal priorities.

What You'll Bring

Essential:

• UK or equivalent qualified lawyer with significant post-qualification experience advising on complex UK and EU data protection matters in‑house and/or in private practice.
• Proven track record of advising on and implementing legally defensible solutions for complex AI, machine learning and advanced data use cases, applying deep knowledge of UK GDPR, EU GDPR and privacy by design principles to enable innovation while effectively managing regulatory risk.
• Demonstrable experience influencing senior stakeholders and shaping strategic decisions on high-profile, business‑critical privacy, data and AI initiatives.
• Deep expertise in UK GDPR, EU GDPR, ePrivacy a