iness and guide compliance with privacy and data protection laws and internal policies. Coordinate with regional counsel and cross-functional stakeholders to align multi-jurisdictional assessments and facilitate global privacy design and compliance efforts.
- Advise on privacy compliance requirements as part of new payments and financial services license application processes, driving privacy compliance programmes supporting such initiatives.
- Advise on payments-related privacy questions, including those related to the collection and use of data in connection with payments transactions, AML/KYC processes, data retention, and cross-border data transfers.
- Support the development of internal and external global privacy policies, notices, processes, standards and guidelines relevant to the payments business.
- Assess and advise on third-party relationships, including data processing agreements and negotiation of privacy-related contract terms.
- Collaborate with cross-functional stakeholders to ensure the effective implementation of privacy and data protection policies and controls across the payments business.
Qualifications
Minimum Qualifications:
- UK or EU qualified Lawyer, with a strong academic background (or foreign equivalent), with 5+ years of privacy related legal experience.
- In-depth knowledge of global privacy laws and payments industry data protection standards, including CCPA, UK GDPR and EU GDPR, FCRA, PCI-DSS, and NIST.
- Experience advising on privacy matters impacting payments business processes, such as those related to KYC/AML, payments processing, buy-now-pay-later, and vendor relationships.
- Strong communication and interpersonal skills, with the ability to convey complex legal concepts to non-legal stakeholders.
Preferred Qualifications:
- CIPP certification in one or more jurisdictions.
- Experience advising on global privacy laws and regulations and reporting requirements in the payments or financial services sector.