HybridHybrid: in person at least 2 days per week and work from home up to 3 days per week.
LegalLegal Counsel & Legal Support
About the job
Requirements
Qualified solicitor or lawyer with at least 8 years of post-qualification experience, including substantial experience advising on privacy and data protection matters within a technology-led, product-driven or data-intensive business.
A proven track record of independently owning a privacy programme, conducting audits, identifying risks and delivering remediation.
Demonstrated experience embedding privacy by design into live products and working closely with Product and Engineering.
Deep expertise in UK and EU GDPR, with working knowledge of international privacy regimes.
Strong technical understanding of data flows, systems architecture and APIs.
Commercial judgement, communication and presentation skills, with the confidence to influence senior stakeholders.
A self-directed, hands-on approach, with proven ability to manage competing priorities and deliver results without a supporting privacy team.
Experience with OneTrust or a similar privacy management platform.
Responsibilities
Partner with Product and Engineering to embed privacy into product design, development and launches.
Assess new products, features and technologies, providing practical, commercially viable solutions.
Advise on data flows, lawful bases, consent, retention and other privacy requirements.
Lead privacy considerations for identity verification, younger users (13+) and age assurance, including the Age Appropriate Design Code and relevant emerging regulations.
Independently conduct risk-based privacy audits and assessments across products, systems, vendors and operations.
Own core privacy governance, including DPIAs, RoPAs, policies, notices, data mapping and international transfers.
Maintain a privacy risk register, identify compliance gaps and drive remediation through to completion.
Oversee data subject rights, complaints and privacy incidents, working with Information Security and any appointed external DPO.
Lead operational AI governance, including AI risk assessments, internal AI use standards and EU AI Act readiness.
Maintain and improve the global privacy programme, ensuring compliance with UK and EU GDPR, PECR and other applicable international privacy laws.
Serve as the primary privacy adviser across the business, providing timely, clear and commercially grounded guidance.
Support Commercial and Partnerships on data protection terms, customer requirements and privacy assurance requests.
Deliver privacy training and communicate across the organisation, including at company-wide forums.
Provide concise, actionable reporting to the General Counsel, executive leadership and, where required, the Board.
Develop scalable privacy processes, playbooks and technology-enabled workflows, using tools such as OneTrust and AI to improve efficiency.
Independently manage competing priorities, establish clear accountability and ensure issues are followed through to resolution.
Desired Qualifications
Experience with identity verification, digital identity, children's or young people's data, advertising and audience data, or implementing AI-enabled processes.
A recognised privacy certification such as CIPP/E or CIPM is advantageous but not essential.
UNiDAYS is a global identity and verification platform connecting brands with verified students and Gen Z audiences across more than 115 markets. We provide verification services to some of the world's largest platforms, alongside marketplace and media products for leading global brands. We are looking for an experienced, commercially minded privacy leader to own our global privacy programme, with a particular focus on embedding privacy into our products and technology. This is a senior, hands-on role and our sole in-house privacy position. You will work closely with Product and Engineering, advise the wider business and collaborate with an independent DPO, should that function be outsourced. You will independently assess risks, set priorities, provide practical guidance and drive matters through to resolution. We need someone who has done this before: a self-starter with sound commercial judgement, strong execution skills and the confidence to operate autonomously while knowing when to escalate.
Responsibilities
Product privacy and privacy by design
Partner with Product and Engineering to embed privacy into product design, development and launches.
Assess new products, features and technologies, providing practical, commercially viable solutions.
Advise on data flows, lawful bases, consent, retention and other privacy requirements.
Lead privacy considerations for identity verification, younger users (13+) and age assurance, including the Age Appropriate Design Code and relevant emerging regulations.
Privacy risk, assurance and governance
Independently conduct risk-based privacy audits and assessments across products, systems, vendors and operations.
Own core privacy governance, including DPIAs, RoPAs, policies, notices, data mapping and international transfers.
Maintain a privacy risk register, identify compliance gaps and drive remediation through to completion.
Oversee data subject rights, complaints and privacy incidents, working with Information Security and any appointed external DPO.
Lead operational AI governance, including AI risk assessments, internal AI use standards and EU AI Act readiness.
Maintain and improve the global privacy programme, ensuring compliance with UK and EU GDPR, PECR and other applicable international privacy laws.
Commercial advice and stakeholder engagement
Serve as the primary privacy adviser across the business, providing timely, clear and commercially grounded guidance.
Support Commercial and Partnerships on data protection terms, customer requirements and privacy assurance requests.
Deliver engaging privacy training and communicate confidently across the organisation, including at company-wide forums.
Provide concise, actionable reporting to the General Counsel, executive leadership and, where required, the Board.
Operational excellence
Develop scalable privacy processes, playbooks and technology-enabled workflows, using tools such as OneTrust and AI to improve efficiency.
Independently manage competing priorities, establish clear accountability and ensure issues are followed through to resolution.
What success looks like
Privacy is embedded in Product and Engineering decisions from the outset.
Material privacy risks are identified proactively, clearly reported and effectively managed.
Audits and assessments result in meaningful improvements, with remediation driven to completion.
The business receives timely, practical advice that supports commercial objectives.
The privacy function operates independently and effectively, with leadership confident that priorities are being managed without constant oversight.
Requirements
Qualified solicitor or lawyer with at lease 8+ years’ post-qualification experience (PQE), including substantial experience advising on privacy and data protection matters within a technology-led, product-driven or data-intensive business.
A proven track record of independently owning a privacy programme, conducting audits, identifying risks and delivering remediation.
Demonstrated experience embedding privacy by design into live products and working closely with Product and Engineering.
Deep expertise in UK and EU GDPR, with working knowledge of international privacy regimes.
Strong technical understanding of data flows, systems architecture and APIs.
Excellent commercial judgement, communication and presentation skills, with the confidence to influence senior stakeholders.
A self-directed, hands-on approach, with proven ability to manage competing priorities and deliver results without a supporting privacy team.
Experience with OneTrust or a similar privacy management platform.
Highly desirable: Experience with identity verification, digital identity, children's or young people's data, advertising and audience data, or implementing AI-enabled processes. Recognised privacy certification (such as CIPP/E or CIPM) is advantageous but not essential.
Benefits
This is your opportunity to Join the world’s largest student verification network and help shape the future of how brands connect with the next generation. We engage a community of 23M+ verified students and graduates across 115 markets, making us a truly global platform. Our brand is a powerhouse in the UK, and we’re rapidly accelerating our presence worldwide—especially in the US, Germany, India, France, Canada, and Australia.
We partner with 850+ of the world’s biggest brands, bringing their products and services to the hearts and minds of tomorrow’s professionals—driving engagement, building affinity, and delivering real results.
We offer a fast-paced, fun, and social working environment where you can truly make an impact. We believe work should enhance and complement your life, which is why we provide a hybrid working model. You will work together in person a minimum of 2 days per week and work from home for up to 3 days a week.
We work hard at UNiDAYS, and we believe in fair compensation for that hard work. That’s why we’re proud to offer all employees full access to our comprehensive benefits package.
Our perks include: 25 days holiday per year increasing with length of service, plus bank holidays Competitive salaries 4pm finishes every Friday Company pension scheme Private health insurance (BUPA) Dental Insurance (BUPA) Income protection policy Life assurance policy Employee Assistance Program Enhanced parental leave pay Regular team building activities £150 pounds towards your home office set up
We are an equal opportunity employer and value diversity at our company. We do not discriminate on the basis of race, religion, colour, national origin, gender, sexual orientation, age, marital status, veteran status or disability status.