Senior Privacy Counsel (6-month FTC)
Entain is looking for a Senior Privacy Counsel to join its Governance team on a 6-month fixed-term contract. This hybrid role involves providing senior legal support on data privacy matters across Entain's operations on a multi-jurisdictional basis. The successful candidate will work closely with compliance, data, product, and technology teams, as well as other legal teams across the Group.
Reporting to the Legal & Compliance Director, the role focuses on strengthening governance, risk management, and leadership reporting. The Senior Privacy Counsel will support Entain's DPOs on matters requiring senior legal input, support engagement with relevant data protection authorities, and help ensure that privacy risks, regulatory obligations, and key initiatives are effectively identified, managed, and escalated across the Group.
- Provide senior legal oversight and support concerning the Group's data protection obligations across relevant jurisdictions, including supporting DPO activities where required and engagement with data protection authorities.
- Oversee, maintain and, where required, support improvements to the Group's data protection framework, including Records of Processing Activities, DPIAs and other risk assessments, data subject rights processes, and breach management and notification procedures.
- Oversee the investigation, risk assessment and resolution of complex privacy complaints, data incidents and data subject rights matters, providing senior guidance on remediation, risk acceptance and regulatory notification requirements.
- Oversee all regulatory correspondence, enquiries, and examinations to resolution, maintaining Entain's standing with regulators.
- Advise on complex data disclosures, regulatory information-sharing requests, law enforcement requests, fraud prevention initiatives and other high-risk data sharing arrangements.
- Contribute to privacy governance, risk management and executive reporting, helping to ensure that key privacy risks, regulatory developments and remediation activities are effectively escalated and communicated to relevant stakeholders.
- Collaborate with the Privacy Operations team to partner with Product, Technology, and Data teams to embed privacy by design principles into product development, data management workstreams and AI initiatives, providing clear guidance that enables innovation while ensuring compliance with data protection regulations, governance standards and privacy risk management expectations.
- Advise on privacy and data protection aspects of AI and other emerging technologies across relevant jurisdictions, including the EU AI Act, applicable UK regulatory requirements and other relevant local regulatory frameworks, working with local specialists where appropriate.
- Support and develop privacy intake, triage, escalation and decision-making processes to ensure privacy risks are identified, assessed and managed consistently across the organisation.
- Advise on data governance, information management, data minimisation, retention and deletion strategies to support regulatory compliance and effective lifecycle management of personal data.
- Support continuous improvement initiatives across the Privacy function, enhancing operational effectiveness, stakeholder engagement, governance maturity and business integration.
- England & Wales-qualified lawyer, with significant post-qualification experience and demonstrated senior experience in data protection and privacy (required).
- Ability to synthesise risk accurately and provide opinions that are clear and actionable, balancing regulatory compliance with commercial outcomes (required).
- Experience managing relationships with data protection authorities and other regulators, providing strategic oversight of regulatory enquiries, investigations, breach notifications and associated management activities (required).
- Demonstrated experience advising on data privacy and data protection matters across multiple jurisdictions (required).
- Ability to identify and navigate differences between local regulatory regimes, working effectively with local legal and privacy specialists where jurisdiction-specific advice is required (required).
- Deep, applied knowledge of GDPR, with grounding in DPIAs, DSARs, breach management, international data transfers, and lawful basis analysis (required).
- Ability to engage with technical teams on AI, data architecture, and digital product development, with the ability to understand technical information and apply privacy requirements pragmatically within technology and data environments (required).
- Familiarity with the EU AI Act and emerging AI regulatory frameworks (required).
- Experience advising on compliance obligations and supporting the design and implementation of practical AI Governance, risk management, and compliance controls across an organisation (preferred).
- Ability to communicate complex concepts clearly to non-specialist audiences, including boards, senior leaders, and operational teams (required).
- Pension contribution matched at up to 6%.
- 25 days annual leave and all Bank Holidays.
- Extra paid leave, including wellbeing and development days.
- Life assurance and Income Protection.
- Private healthcare and wellbeing support.
Entain is one of the world's largest sports betting and gaming entertainment groups and a FTSE 100 company. Formed when GVC Holdings rebranded as Entain in December 2020, its brands trace their history back to the 1880s and include bwin, Coral, Foxy, Gala, Ladbrokes and partypoker. Through its joint venture with MGM Resorts International, it powers BetMGM in the United States with its proprietary technology. Headquartered in London, Entain employs over 30,000 people with offices across 19 countries.