Overview

As Privacy Counsel, you will build and lead Tripledot Studios' global privacy and data protection program within the in-house legal team. You'll work closely with product, marketing and engineering to embed privacy-by-design across gaming products and features, while managing data subject requests, breaches, and vendor obligations. This role offers scope to steer regulatory responses and advisory across multiple jurisdictions in a fast-growth, player-focused environment.

You'll help shape privacy strategy that supports innovative mobile games at scale.

Compensaciones / Beneficios 25 days holiday (plus bank holidays)

Hybrid working

Private medical cover

Life & Critical Illness cover

Family forming support

Employee Assistance Program

Responsabilidades Build, implement and maintain integral privacy and data protection program, policies and procedures

Monitor and advise on privacy and data protection risks across digital markets affecting mobile gaming

Conduct data protection impact assessments and privacy reviews, embedding privacy-by-design

Collaborate with product, marketing and engineering to review products for compliance and mitigate privacy risks

Manage data subject requests and oversee responses to personal data breaches and incidents





Negotiate data processing agreements and manage privacy obligations with vendors, partners and platform providers

Manage strategic response to inquiries and investigations by data protection authorities worldwide

Requisitos principales EU/UK/US qualified lawyer with minimum 7+ years of applicable experience strong generalist capabilities in addition to privacy expertise experience with both law firm and in-house environments preferred experience with consumer-facing technology monetized with ads and in-app purchases a plus strong knowledge of GDPR, UK GDPR, CCPA/CPRA and emerging US state privacy laws experience advising on data protection for mobile apps (consent management, children's privacy, advertising and analytics, cross-border transfers) and DPIAs experience handling regulatory inquiries and enforcement actions excellent English communication and interpersonal abilities ability to lead complex projects across multiple jurisdictions

Proactiveness

Drive and accountability

Business acumen, pragmatism and resourcefulness

Privacy and data protection laws (GDPR, UK GDPR, CCPA/CPRA)

Data protection impact assessments (DPIA)

Consent management for mobile apps

📌 Privacy Counsel (Barcelona)
🏢 Tripledot Studios
📍 Barcelona