Privacy Counsel at Tripledot Studios T EU/UK/US qualified lawyer with minimum of 7+ years of applicable experience. Combination of law firm and in-house exposure viewed favorably.

Experience with consumer-facing technology monetized with ads and in-app purchases; video game industry experience is a plus. Strong working knowledge of GDPR, UK GDPR, CCPA/CPRA and emerging US state privacy laws.

Experience advising on mobile app privacy issues, including consent management, children's privacy (COPPA, age-appropriate design), advertising/analytics technologies, and cross-border data transfers.

Experience conducting DPIAs, managing data subject requests, negotiating data processing agreements, and handling regulatory inquiries/enforcement actions. Outstanding written and verbal communication skills in English. Proven ability to lead complex projects across multiple jurisdictions.

A Career-Defining Move in Mobile Gaming Law The legal industry is witnessing a seismic shift as privacy and data protection become boardroom priorities across the globe. For senior lawyers with a passion for technology, the it is a global powerhouse seeking a legal architect to build its privacy framework from the ground up. This is not a typical compliance role.

The successful candidate will be entrusted with shaping the entire privacy and data protection practice of the in‐house legal team during a period of remarkable growth. For lawyers who thrive on responsibility, strategic influence, and cutting‐edge legal challenges, this position represents a rare blend of senior‐level accountability and entrepreneurial freedom. The role is based in Barcelona, a vibrant European tech hub, yet it carries a truly global mandate—covering digital markets, platform providers, and data protection authorities across multiple jurisdictions.

This ethos extends to their legal team, where the Why In-House Privacy Counsel Is One of the Most Demanding Legal Careers Right Now The days when privacy law was a niche practice are long gone. Today, every consumer‐facing digital product must navigate a labyrinth of regulations, from the EU's General Data Protection Regulation (GDPR) to the California Consumer Privacy Act (CCPA/CPRA) and a patchwork of emerging state laws in the US. The mobile gaming sector sits at the intersection of these challenges: it involves vast amounts of personal data, children's privacy concerns, behavioral advertising, cross‐border data flows, and in‐app purchase ecosystems.

You must balance legal compliance with commercial pragmatism, all while advising product teams on how to innovate without crossing regulatory lines. By embedding privacy‐by‐design into new products and features, the counsel will directly influence how millions of users interact with the company's games.

Inside the Job:



Key Responsibilities That Will Define Your Day-to-Day The responsibilities outlined in the are both comprehensive and challenging, offering a clear picture of what a modern privacy counsel actually does in a fast‐paced tech company: Building the global privacy program: This goes beyond drafting policies—it means designing the entire data protection infrastructure of the company, from data mapping to vendor management. You will monitor and advise on privacy risks across digital markets and platforms, which requires staying current on laws in Europe, the US, and beyond.

Data Protection Impact

Assessments are a key tool for embedding privacy‐by‐design into every new product feature, especially those involving children or large‐scale data profiling. The legal team is not a silo; Handling data subject requests and breach responses: Negotiating data processing agreements: Managing privacy obligations with vendors, partners, and platform providers is a core part of the role, requiring both legal expertise and commercial dexterity. If a data protection authority comes knocking, you will lead the company's strategic response—a critical function that can make or break a business's reputation.

The job demands a lawyer who can think on their feet, communicate complex legal concepts in plain English, and navigate the often‐conflicting demands of innovation and regulation. EU/UK/US qualified lawyer with a minimum of 7+ years of applicable experience . This is not a stepping‐stone role for junior associates; it is a senior position for seasoned professionals who have cut their teeth on complex data protection issues. strong generalist capabilities —meaning you should be comfortable handling a wide range of legal matters beyond privacy, even though privacy will be your primary focus.

Ideally, you will have experience in both law firm and in‐house settings. The former gives you rigorous analytical training; If you have video game industry experience, consider that a major plus—it demonstrates you understand the unique user dynamics and revenue models at play. On the technical side, you need a working knowledge of GDPR, UK GDPR, CCPA/CPRA, and other emerging US state privacy laws.

But the job posting goes deeper, asking for experience with mobile app‐specific issues such as consent management, children's privacy (COPPA and age‐appropriate design), advertising and analytics technologies, and cross‐border data transfers.



This is not just about knowing the law; One of the most telling requirements is the proven ability to lead complicated projects and advise across multiple jurisdictions. They describe a lawyer who can thrive in a culture that celebrates intelligent risk‐taking and a love for making games.

The 25 days of paid holiday (plus bank holidays) is generous by any standard, and the hybrid working model provides flexibility that many legal roles still lack. Even more appealing is the 20 days of remote working per year, allowing you to work from anywhere in the world or convert those days into additional WFH days when needed. Other benefits include private medical cover, life and critical illness cover, family forming support, an employee assistance program, sport compensation, meal and transport vouchers, and English and Spanish classes.

The emphasis on continuous professional development is particularly attractive for lawyers who want to keep growing, whether through formal training, conferences, or on‐the‐job exposure to new legal challenges. You will be joining a legal community that is increasingly focused on tech, data, and digital rights, making it an ideal environment for networking and collaboration. While the 7+ years of experience and EU/UK/US qualification are non‐negotiable, the most critical differentiator is hands‐on experience with global privacy laws applied to consumer‐facing technology.

Tripledot specifically values candidates who have worked on mobile apps, including consent management, children's privacy, and cross‐border data transfers. The job posting is for a position based in Barcelona, but given the hybrid working model and Tripledot's general footprint, relocation support may be possible for the right candidate. From a legal qualification standpoint, EU/UK/US qualified lawyers are welcome to apply, regardless of current location.

Privacy‐by‐design means integrating data protection and privacy considerations into the development of products and features from the very beginning, rather than adding them as an afterthought. For Tripledot, this could involve building systems that minimize data collection by default, obtaining age‐appropriate consent for children, and ensuring any new advertising technology does not violate GDPR or CCPA requirements. The biggest challenges include navigating the fragmented and rapidly evolving privacy laws across multiple jurisdictions, especially the interplay between GDPR and U.S. state laws.

Additionally, managing data subject requests at large scale and responding to regulatory investigations require both legal acumen and crisis management skills. Balancing these compliance demands while supporting the business's need to launch popular games quickly will require the pragmatism and resourcefulness that Tripledot values.

📌 Privacy Counsel at Tripledot Studios (Barcelona)
🏢 Tripledot Studios
📍 Barcelona