Senior Legal Counsel - Privacy

New Today

Miniclip operates games that are played by hundreds of millions of people around the world and the legal team's work reflects that scale and complexity. Privacy in mobile gaming has moved from a compliance checkbox to a strategic discipline. GDPR enforcement is intensifying, the 2025 COPPA Rule amendments take full effect in April 2026, the UK Children's Code is being actively enforced, and data flows in ad‑supported F2P games are under scrutiny from regulators on multiple continents simultaneously. What You'll Be Doing Privacy Advisory & Compliance
Lead legal compliance for the full range of gaming‑specific privacy obligations, advising product, engineering, commercial, and marketing teams on data protection obligations across all major operating jurisdictions. Advise on the data protection implications of in‑game advertising and ad tech, including programmatic advertising, third‑party SDK integrations, behavioural profiling, and contextual targeting—particularly where these intersect with mixed‑audience titles. Conduct and oversee data protection impact assessments (DPIAs) for new products, features, and data processing activities. Draft and maintain privacy notices, consent flows, parental consent mechanisms, and internal data processing records across the portfolio. Support and manage responses to data subject rights requests, regulatory enquiries, and supervisory authority correspondence. Lead on data breach preparedness, investigation, and notification obligations across multiple jurisdictions. Review and advise on third‑party SDK integrations (analytics, attribution, ad mediation, social features) with a focus on data minimisation, purpose limitation, and contractual protections.
Governance & Cross‑Functional Work
Develop training materials and practical guidance for product, commercial, and marketing teams on privacy obligations in gaming. Monitor regulatory developments and enforcement trends—particularly FTC, ICO, and EU DPA actions in the gaming space and ensure the business has timely visibility of emerging obligations. Maintain Miniclip's Records of Processing Activities (RoPAs) and vendor data processing agreements, including DPAs with key partners. Manage external privacy counsel and, where relevant, engage with trade associations and regulatory consultations on gaming‑sector privacy policy.
What We're Looking For Essential
Approx 5–8 years PQE with substantive in‑house or specialist private practice experience in data protection and privacy law. Solid working knowledge of GDPR (including the children's consent regime), UK GDPR, and the ICO's Children's Code—understanding how these apply to ad‑funded, live‑service digital products. Working knowledge of COPPA, including the 2025 Rule amendments and their implications for gaming companies operating mixed‑audience titles. Understanding of the ad tech ecosystem and the data flows in F2P mobile games—can review an SDK integration and identify privacy risks without needing things explained from scratch. Comfortable operating across multiple jurisdictions simultaneously and advising on global data protection frameworks. Qualified solicitor in England & Wales (or equivalent).
Nice to Have
In‑house experience in mobile gaming, consumer apps, or ad‑supported digital media. CIPP/E or equivalent privacy qualification desirable but not required. Direct experience with regulatory engagement or supervisory authority correspondence.
The Qualities That Matter Most
Technically rigorous—knows the law deeply enough to push back on product decisions that create real exposure, and to identify the risks that others miss. Practically minded—distinguishes between theoretical risk and genuine compliance exposure, and gives clear answers rather than deferring everything to outside counsel. Collaborative—builds trust with product and engineering teams by being useful, not obstructive. Proactive—tracks enforcement trends and regulatory developments and translates them into timely, business‑relevant guidance. Clear communicator—explains complex data protection obligations to non‑lawyers. Low ego, high impact—cares about outcomes, not credit.
#J-18808-Ljbffr
Location:
Greater London
Job Type:
FullTime

We found some similar jobs based on your search