Remote Privacy Lawyer - Poland

Moritz; Poland; On-site; PLN 300,000 - 520,000; Full time

Job summary

Moritz is an AI-native global law firm building the next generation of commercial legal infrastructure. We work with clients worldwide and expand into new markets, including public procurement work, delivering high-stakes, high-volume contract work through an efficient platform.

The Role focuses on drafting and negotiating DPAs, SCCs, and privacy terms, with emphasis on international transfers and AI privacy implications.

Qualifications

• 5+ years practising privacy or data protection law in private practice or in-house.
• Deep familiarity with GDPR, UK GDPR, and CCPA; HIPAA or sector rules is a plus.
• International transfers expertise; SCCs, transfer impact assessments, cross-border data flows.

Responsibilities

• Lead drafting, review, and negotiation of DPAs, SCCs, joint controller arrangements, and privacy terms.
• Advise clients on privacy implications of AI systems, including data training, automated decision-making, and EU AI Act interfaces.
• Support incident response: breach assessment, notifications, regulator engagement, remediation.

Skills

Privacy law

Data protection

GDPR knowledge

SCCs / cross-border transfers

AI privacy

Regulatory translation to product

Education

Poland bar admission

CIPP/E certification (plus)

Job description

Moritz is an AI-native global law firm building the next generation of commercial legal infrastructure. We combine proprietary AI tooling with a curated network of senior commercial lawyers to deliver vetted contract work at a speed and price point that traditional firms cannot match.

We serve clients globally across Europe, the US, and Australia, with active expansion into new markets including public procurement work.

We believe great commercial law is high-stakes, high-volume, and overdue for re-engineering. We hire people who want to do the best work of their careers in a small, ambitious team.

Moritz has raised a $9M seed round from Y Combinator, 20VC, and 20+ unicorn founders — including the founders of Dropbox, Gusto, and Instacart.

The Role

• Lead the drafting, review, and negotiation of DPAs, SCCs, joint controller arrangements, and privacy terms in commercial contracts for clients ranging from startups to midsize and enterprise companies.
• Advise clients on the privacy implications of deploying AI systems — training data, automated decision-making, transparency obligations, and the intersection of data protection law with the EU AI Act and equivalents.
• Support incident response — breach assessment, notification obligations, regulator engagement, and remediation.
• If you accept work with a known SLA (ex: 24hr turnaround), you must commit to meeting that SLA.

What You'll Bring

• 5+ years practising privacy or data protection law in private practice or in-house.
• Deep familiarity with GDPR, UK GDPR, and CCPA, and ideally one or more of: HIPAA, financial services data rules, or sector-specific regimes.
• International transfers expertise. SCCs, transfer impact assessments, adequacy decisions, and the practical mechanics of cross-border data flows.
• Working knowledge of AI and privacy. Training data, profiling, automated decision-making, and where the EU AI Act meets the GDPR.
• A practical, risk-based approach. You translate regulatory requirements into decisions a product team can act on. Privacy certifications (CIPP/E or similar) are a plus.
• Qualifications. Active license and in good standing with the bar / law society of Poland. Professional indemnity insurance maintained or willing to obtain in line with local requirements.
• Work on the privacy frontier of AI deployment — not just commenting on it, but operationalizing compliance for real products.
• Flexible engagement: work with Moritz on a project or retainer basis alongside your existing practice.
• Senior team, modern tooling, and clients who value speed and clarity.
• Be part of a well-funded company (Y Combinator, 20VC, 20+ unicorn founders) building category-defining legal infrastructure.

Frequently Asked Questions

How many hours will I need to commit to Moritz?

Volume depends on the scope of the client engagements you take on and can grow over time. The decision to accept, continue, or expand any engagement is made jointly between you, Moritz, and the client.

What technical requirements are needed to use Moritz's platform?

Our platform is web-based — all you need to access your Moritz matters and conduct negotiations is a reliable internet connection and word processing software. Any device you use to access the platform must meet our security requirements, which we will share during onboarding.

Am I employed by Moritz when I join the network?

No. Moritz does not employ the lawyers in its co-counsel network. Moritz is a law firm and engages clients directly; co-counsel are engaged by Moritz on an independent contractor basis to support those client matters under Moritz's supervision and quality standards. Moritz handles client intake, billing, conflicts checks, and matter management, so you can focus on the legal work.

How are co-counsel matched to client matters?

Moritz matches co-counsel to client matters based on jurisdiction, subject-matter expertise, capacity, and fit. The client engages Moritz; Moritz assigns the right co-counsel to the matter. You retain professional judgment on the legal work, while Moritz owns the client relationship, scoping, and commercial terms.