Impress employers and recruiters.
Choose from hundreds of resume examples.

Target Resume Now

Tailor your resume to this Senior Privacy Counsel role.

Rezi rewrites your resume against Carwow's job description. Free.

Resume score gauge reading 58 out of 100

Don't guess if your resume is good enough.

See how it scores against the Senior Privacy Counsel posting at Carwow — free, in seconds.

About the Role

As Senior Privacy Counsel, you will be Carwow’s dedicated in-house privacy lawyer and operational privacy lead, playing a pivotal role in enabling the business to grow and scale at pace with integrity. This is an exciting opportunity to develop your career in a complex, high-growth and data-thirsty marketplace business. You will have the mandate to lift the lid on our technology stack, validate our data flows, identify legal and operational privacy risks and work directly with our Product, Engineering, Data, Marketing and commercial teams to keep the business safe and moving fast.

Responsibilities

Own, develop and maintain Carwow’s enterprise privacy governance framework, encompassing internal policies, ROPAs, privacy notices, risk registers, retention schedules and associated controls.
Interpret applicable legal requirements and ensure our documentation and processes reflect the reality of Carwow’s technology stack and processing activities, leading remediation where discrepancies or risks are identified.
Act as Carwow’s principal in-house legal advisor on privacy and data protection matters.
Develop strong business partnering relationships across Marketing, Media, Product, Engineering, Data and other parts of the business, providing pragmatic, risk-based legal advice that enables commercial objectives while appropriately managing privacy risk.
Provide advice to senior management and support the General Counsel in updating the Company’s Senior Leadership Team and Executives as needed.
Build a strong internal perception of privacy as a “trust builder”.
Design and deliver role-specific training that is engaging, commercially relevant and free of unnecessary legal jargon, helping teams understand both their legal obligations and how to apply them in practice.
Lead the privacy aspects of data breach and incident response, working cross-functionally to investigate incidents, assess legal and regulatory risk, determine notification obligations and oversee remediation.
Liaise with the external DPO, regulators and other relevant stakeholders as appropriate.
Draft, review and negotiate DPAs, DSAs and other data protection provisions and agreements arising from commercial arrangements.
Provide practical legal advice on controller/processor relationships, data sharing, international transfers and related privacy risks.
Own and continuously improve Carwow’s processes for responding to data subject rights requests, ensuring requests can be handled lawfully, efficiently and with minimal disruption to the business.
Provide legal guidance on complex or sensitive requests where required.
Provide legal and operational privacy support on new commercial propositions looking to leverage Carwow’s data for third-party audience targeting, segmentation and advertising.
Advise on the appropriate use of personal data, profiling, consent and data-sharing structures and help design commercially workable and legally robust mechanisms for using and sharing data.
Work closely with Data & Insights, IT, Engineering and Product teams throughout the product lifecycle to embed Privacy by Design.
Lead or support privacy assessments, identify legal and operational risks in new products and processing activities, and translate complex technical data flows into clear, risk-based advice for the General Counsel, Executives and wider business.
Own and operate core privacy compliance processes, including DPIAs, LIAs and data-sharing assessments.
Look continuously for opportunities to integrate these into existing business workflows, with an eye on making compliance proportionate, scalable and automated wherever possible.
Monitor and interpret relevant developments in privacy, data protection, digital regulation and related areas, assess their impact on Carwow and translate new legal requirements into practical changes to products, policies, controls and business processes.
Provide privacy legal support on M&A, funding and other corporate transactions, including conducting privacy due diligence, identifying material risks and supporting remediation and integration activity.
Advise on the privacy implications of AI and emerging technologies adopted or developed across the business, while supporting the development of practical governance mechanisms that allow Carwow to innovate responsibly.
Support Carwow’s businesses across the UK, Germany, Spain and Portugal, advising on relevant local and European privacy requirements and working with external counsel where specialist local advice is required.

Requirements

A qualified lawyer, admitted to practise in England & Wales or another relevant UK or European jurisdiction, with significant experience advising on privacy and data protection matters.
Significant experience working in-house, balancing legal and regulatory requirements with commercial objectives and operating as a trusted advisor to the business.
Strong working knowledge of UK and European data protection law, with the ability to interpret legislation, regulatory guidance and emerging issues and translate them into clear, practical and commercially workable advice.
Experience not only providing privacy legal advice but also building, operating or materially contributing to a privacy programme, including areas such as DPIAs, RoPAs, privacy notices, data rights, retention, incident response and privacy governance.
The ability and willingness to work autonomously as Carwow’s principal in-house privacy specialist, moving comfortably between complex legal analysis and hands-on operational delivery.
Passionate about the intersection of AI and privacy, with an interest in how to safeguard the organisation during technology adoption while also leveraging AI to enhance and automate privacy operations.
A team player with a growth mindset, high EQ and low ego, excited to be part of a scale-up, high-growth company where every day brings new challenges and opportunities.
To be able to work in a fast-paced environment with teams that move and pivot quickly.
Fluency in English and strong written and verbal communication skills, together with a proactive, persuasive and adaptable manner.
Driven to ensure the Legal & Compliance Team is viewed as a genuine partner to the business, with the initiative and credibility to build relationships across functions and at senior levels.
Ability to lead cross-functional projects and influence stakeholders without relying on formal authority.
A track record of working effectively with all levels of an organisation, including senior management and executives.

Skills

Privacy governance
Data protection law
Legal advice
Business partnering
Training design and delivery
Data breach response
Contract negotiation (DPAs, DSAs)
Data subject rights requests management
Retail media
Ad tech
Privacy by Design
Privacy assessments
DPIAs
LIAs
Data-sharing assessments
Regulatory monitoring
M&A due diligence
AI and emerging technology
Multi-jurisdictional advising
English fluency
Written and verbal communication
Cross-functional project leadership
Stakeholder influence

Location

UK
Europe

Work Type

Hybrid working (2 days working from home)
Option to work from abroad up to 4 weeks

Experience Level

Senior

Education Level

Qualified lawyer admitted to practise in England & Wales or another relevant UK or European jurisdiction
CIPP/E and/or CIPM qualification from the IAPP, or equivalent demonstrable privacy expertise (Bonus Points)

Salary/Compensations

Competitive salary

Benefits

Matched pension contributions
Share options
Bupa Private medical and dental insurance
Eyecare vouchers
Life Assurance
Monthly coaching sessions with Spill
Enhanced holiday package
28 days annual leave
1 day for your wedding
1 day off when you move house
30 days of annual leave per year (from third year anniversary)
35 days of annual leave per year (from tenth year anniversary)
Option to buy 3 extra days of holiday per year
Inclusive parental, partner and shared parental leave
Fertility treatment and pregnancy loss policies
Bubble childcare support
Discounted nanny fees
Up to £500/€550 home office allowance
Generous learning and development budget
Regular social events

About the Company

Carwow is a car-changing destination of choice, combining technology, media and deep automotive expertise to transform how people buy, sell, advertise and lease cars.
It has grown into one of the largest online car-changing destinations in Europe, with significant growth in car purchases and listings.
The company has expanded through acquisitions, notably Carwow Leasey and Autovia (creators of AutoExpress and Evo magazines), significantly increasing its audience and YouTube subscriber base.
Carwow has successfully launched its Sell My Car business in Germany and continues to drive towards being the go-to destination for car changes.

Equal Opportunity

Diversity and inclusion is an integral part of our culture. We know that diverse teams are strong teams, so we welcome those with alternative identities, backgrounds, and experiences to apply for this position. We make recruiting decisions based on experience, skills and potential, so all our applicants are treated fairly and equally.