Legal Counsel

Summary

Join Prolific, a leader in human data infrastructure for AI development, and play a key role in ensuring data protection compliance. You will provide commercially-focused advice on data privacy, contribute to the improvement of the company's data privacy program, and support compliance activities such as DPIAs and LIAs. Responsibilities include developing internal training, advising on AI development's regulatory considerations, and assisting with data incident management. You will also review and negotiate commercial contracts and support broader commercial legal work. This role requires a qualified solicitor or barrister with 3+ years PQE and extensive experience advising on UK data protection laws for tech businesses. Prolific offers a competitive salary, benefits, and remote working opportunities within an impactful, mission-driven culture.

Requirements

• Qualified solicitor or barrister
• Minimum 3 years’ PQE
• Extensive experience advising on UK data protection laws, including for tech and digital businesses, in an in-house or private practice role (with this forming the main part of your role over the past 3+ years)
• A comprehensive and nuanced understanding of UK and EU data protection and privacy frameworks, including UK/EU GDPR, PECR, and related regulations
• An ability to provide pragmatic, commercially-focused advice that supports and enables business initiatives
• Highly skilled in reviewing, negotiating, and advising on data protection aspects of commercial contracts
• An ability to communicate complex legal issues clearly and succinctly, and advise and collaborate with stakeholders at all levels
• An energetic and proactive approach, with a willingness to take initiative and solve problems

Responsibilities

• Building a good understanding of Prolific’s operations and objectives, and how data privacy compliance can support and enable these
• Providing clear, practical, and commercially-focused advice on a wide range of data privacy matters in a business where robust data protection is critical to our operations
• Contributing to the continuous improvement of the company’s data privacy programme, ensuring it remains robust, effective, and aligned with evolving legal requirements and business needs
• Supporting compliance activities, including conducting Data Protection Impact Assessments (DPIAs), Legitimate Interests Assessments (LIAs), and maintaining Records of Processing Activities (RoPA), seeking input from relevant stakeholders
• Developing and delivering internal training and communications, building awareness and embedding a privacy-first culture across the business
• Advising on data privacy and wider regulatory considerations associated with AI development and deployment, ensuring alignment with evolving AI regulatory frameworks
• Assisting with data incident and breach management in a timely and collaborative manner, and supporting complex data subject requests, including subject access and deletion requests
• Monitoring the effectiveness of privacy controls and processes, tracking key trends, and assisting with the preparation of reports for management
• Reviewing, drafting, and negotiating commercial contracts with customers and suppliers
• Supporting the legal team’s broader commercial work and advising on a range of related legal issues

Preferred Qualifications

• Wider legal/commercial contract experience; comfortable reviewing and negotiating different types of contract
• Dual UK/US qualified, or experience advising on US data protection and privacy frameworks and practices
• Experience advising on the legal aspects of AI development and deployment

Benefits

• Competitive salary
• Benefits
• Remote working