Legal Counsel – Privacy & AI

About the role

Join Three’s Legal & Regulatory team as a Legal Counsel focused on privacy and artificial intelligence. You will translate evolving EU and Irish data‑protection, AI and data‑governance regulations into practical, commercially‑driven advice that enables innovation while managing risk.

Key responsibilities

• Provide legal advice on GDPR, ePrivacy, the EU AI Act, Data Act, NIS2 and other emerging regulations.
• Support Marketing and Technology teams with cookie governance, consent management, email and push‑notification compliance.
• Draft, negotiate and maintain data‑protection clauses and Data Processing Agreements with suppliers, customers and group entities.
• Embed privacy‑by‑design and responsible‑AI principles into new products, services and commercial initiatives.
• Coordinate responses to data‑protection incidents, investigations and regulatory filings, and liaise with the Data Protection Commission and other EU supervisory authorities.
• Conduct privacy impact assessments, AI risk assessments and vendor risk reviews for new projects.
• Maintain up‑to‑date records of processing activities, DPIAs and governance frameworks.

Required profile

• Qualified lawyer with commercial mindset, experienced in Irish and EU data‑protection law.
• Strong knowledge of AI regulatory frameworks such as the EU AI Act, Data Act, NIS2 and CER.
• Proven ability to work cross‑functionally with marketing, technology and product teams.
• Experience drafting and negotiating data‑protection clauses and DPAs.
• Track record of managing privacy incidents and regulatory interactions.

Required skills

• GDPR and ePrivacy regulatory expertise.
• Understanding of the EU AI Act, Data Act, NIS2 and related compliance requirements.
• Privacy impact assessment (PIA) and data‑protection impact assessment (DPIA) methodology.
• Drafting and negotiating Data Processing Agreements.
• Privacy‑by‑design and responsible‑AI implementation.