Senior Privacy Counsel – AI & Data Compliance

Mistral; Greater London; On-site; GBP 90,000 - 150,000; Full time

Job summary

Mistral AI is seeking an experienced Legal Counsel to support GDPR compliance by partnering with product and engineering teams and drafting compliance documentation.

The legal team at Mistral AI, based in Paris and Palo Alto, covers regulatory, IP, contracts and corporate, and this role will help extend privacy programs across the organization.

You will advise on privacy for new features, manage DPIAs, data subject requests, DPAs, and monitor regulatory guidance.

Qualifications

• Master's degree in law; bar admission is a plus.
• 5–10 years of experience in a law firm or tech company, in IT law and GDPR compliance.
• Strong knowledge of privacy regulations and guidance from national authorities and the EDPB.
• Understanding of AI technologies and their applications is essential.
• Ability to identify compliance issues and develop practical solutions.
• Good project management skills.
• Excellent written and verbal communication; business-oriented.

Responsibilities

• Manage Mistral AI’s GDPR compliance documentation (records of processing, DPIAs, internal policies).
• Answer data subject requests and implement GDPR processes and automation.
• Manage employee privacy training.
• Negotiate DPAs with providers and customers.
• Monitor privacy regulations and supervisory guidance.

Skills

Privacy law

IT law

GDPR

Project management

Analytical thinking

Communication

International experience

Adaptability

AI familiarity

Bar admission (plus)

Education

Master's degree in law

Job description

Mistral AI is seeking an experienced Legal Counsel to support GDPR compliance by partnering with product and engineering teams and drafting compliance documentation.

The legal team at Mistral AI, based in Paris and Palo Alto, covers regulatory, IP, contracts and corporate, and this role will help extend privacy programs across the organization.

You will advise on privacy for new features, manage DPIAs, data subject requests, DPAs, and monitor regulatory guidance.