Legal Counsel – Privacy & AI

About the role

Three is seeking a commercially‑minded lawyer to join its Legal & Regulatory team as a Legal Counsel focused on privacy and artificial intelligence. Reporting to the Senior Regulatory Counsel and Data Protection Officer, you will translate evolving EU and Irish data protection, AI and data governance rules into practical, business‑friendly advice.

Key responsibilities

• Provide legal counsel on GDPR, ePrivacy and other Irish/EU data protection statutes.
• Monitor and interpret emerging regulations such as the EU AI Act, Data Act, NIS2 and CER, advising internal stakeholders.
• Support Marketing and Technology teams with cookie, consent, email and push‑notification compliance.
• Draft, negotiate and maintain data‑protection clauses and Data Processing Agreements with suppliers and customers.
• Embed privacy‑by‑design and responsible AI principles into new products, services and commercial initiatives.
• Coordinate responses to data‑protection incidents, regulatory inquiries and interactions with the Data Protection Commission.
• Conduct privacy impact assessments, AI risk assessments and vendor risk reviews.
• Maintain up‑to‑date records of processing activities, DPIAs and governance documentation.

Required profile

• Qualified lawyer with solid experience in Irish and EU data‑protection law.
• Demonstrated knowledge of emerging AI regulatory frameworks (e.g., EU AI Act).
• Strong commercial acumen and ability to work cross‑functionally.
• Excellent communication skills, both written and verbal.

Required skills

• In‑depth understanding of GDPR and ePrivacy regulations.
• Familiarity with AI governance and risk‑assessment methodologies.
• Experience drafting Data Processing Agreements and privacy clauses.
• Ability to conduct privacy impact assessments and manage incident response.