Associate General Counsel, Privacy Compliance

About Us

At Cloudflare, we are on a mission to help build a better Internet. Today the company runs one of the world’s largest networks that powers millions of websites and other Internet properties for customers ranging from individual bloggers to SMBs to Fortune 500 companies. Cloudflare protects and accelerates any Internet application online without adding hardware, installing software, or changing a line of code. Internet properties powered by Cloudflare all have web traffic routed through its intelligent global network, which gets smarter with every request. As a result, they see significant improvement in performance and a decrease in spam and other attacks. Cloudflare was named to Entrepreneur Magazine’s Top Company Cultures list and ranked among the World’s Most Innovative Companies by Fast Company. 

At Cloudflare, we’re not looking for people who wait for a polished roadmap; we’re looking for the builders who see the cracks in the Internet that everyone else has simply learned to live with. We value candidates who have the instinct to spot a "normalized" problem and the AI-native curiosity to create a solution using the latest tools. Our culture is built on iteration, leveraging AI to ship faster today to make it better tomorrow, while ensuring that every improvement, no matter how small, is shared across the team to lift everyone up. If you’re the type of person who values curiosity over bureaucracy, and that AI is a partner in solving tough problems to keep the Internet moving forward, you’ll fit right in.

Available Locations

London, UK

About this Role

Ensuring the privacy of personal information is core to Cloudflare’s mission to help build a better Internet. We’re looking for an experienced counsel to help Cloudflare navigate the complicated challenges of processing personal data amid an ever-changing and diverse regulatory landscape. Specifically, you will oversee the functions of Cloudflare’s Office of the Data Protection Officer to manage the company’s existing privacy program and ensure the company continues to comply with all applicable data protection and privacy laws, including the EU General Data Protection Regulation (“GDPR”). You will also be responsible for overseeing Cloudflare’s responsible AI program and compliance requirements stemming from AI regulations, including the EU AI Act. Your focus will be on building, implementing, and maintaining privacy program and AI program elements, including working closely with the non-lawyers on the Data and Privacy Operations team to implement these programs. 

We are looking for an exceptionally talented, energetic and friendly privacy attorney to join our team based in London. This role is ideal for someone who is a proactive self-starter and strategic thinker, who has a thirst for knowledge and continued growth, all while working as part of a great team. This position reports to Cloudflare’s Chief Privacy Officer. 

Responsibilities 

• Be the subject matter expert on existing and emerging AI and data protection regulations or guidance in the EMEA region, with a focus on the jurisdictions where Cloudflare has offices (multiple locations in the EU, UK, Switzerland, and UAE). You will work collaboratively across multiple functions to advise on the impact of such regulations or guidance on Cloudflare’s business.
• Understand and advise on the requirements related to cross-border data transfers globally.
• Collaborate with and advise product lawyers on Cloudflare’s privacy by design policies.
• Advise the Data and Privacy Operations team on handling data subject requests, records of processing activities, privacy and AI impact assessments, and more. 
• Advise the Data and Privacy Operations team on conducting and approving privacy and AI vendor reviews.
• Support the commercial transactions legal team in negotiating data processing addendums and similar contractual language under global privacy laws.
• Support the corporate legal team on data and privacy-related due diligence for M&A transactions as well as supporting post-acquisition integration tasks related to privacy and AI compliance.
• Advise on data protection implications of and legal requirements applicable to security and privacy incidents, exercising judgment and discretion while advising cross-functional teams on incident handling procedures and communications. 
• Create and contribute to playbooks and FAQ libraries for various teams to ensure they have the most current guidance related to privacy, data governance, and responsible AI.  

Desirable Skills, Knowledge, and Experience

• LLB/JD equivalent degree with strong academic credentials and admitted to practice law in one of the jurisdictions where Cloudflare has an office and/or be a U.S. or UK-qualified lawyer 
• 10+ years of relevant legal experience counseling a global company on international privacy and data protection issues, preferably with time in-house at a technology company with established privacy compliance protocols as well as at a top regional or global law firm
• Expert knowledge of EMEA-region AI, privacy, and data protection laws, regulations and compliance regimes at all levels, including familiarity with industry-specific regimes 
• Solution-oriented business and legal counselor with a growth mindset and strong sense of humor
• Strong communication skills and cooperative team player. Lead with empathy and understanding while embracing diverse points of view. Flexibility to adapt and thrive in a fast paced environment.
• Demonstrated ability and strong desire to effectively advise, develop relationships, and work collaboratively with stakeholders across teams to establish effective solutions efficiently and in an amenable manner
• Experience prioritizing work and providing advice under deadlines
• Ability to draft documents, policies, messages and anything else in a precise manner, while still being concise and digestible for non-lawyers 
• A willingness to work flexibly on occasion to accommodate working with a globally distributed team
• Technical background / expertise is highly desired – while a science or technical degree is not a prerequisite for this job, a passion for technologies is

What Makes Cloudflare Special?

We’re not just a highly ambitious, large-scale technology company. We’re a highly ambitious, large-scale technology company with a soul. Fundamental to our mission to help build a better Internet is protecting the free and open Internet.

Project Galileo: Since 2014, we've equipped more than 2,400 journalism and civil society organizations in 111 countries with powerful tools to defend themselves against attacks that would otherwise censor their work, technology already used by Cloudflare’s enterprise customers--at no cost.

Athenian Project: In 2017, we created the Athenian Project to ensure that state and local governments have the highest level of protection and reliability for free, so that their constituents have access to election information and voter registration. Since the project, we've provided services to more than 425 local government election websites in 33 states.

1.1.1.1: We released 1.1.1.1 to help fix the foundation of the Internet by building a faster, more secure and privacy-centric public DNS resolver. This is available publicly for everyone to use - it is the first consumer-focused service Cloudflare has ever released. Here’s the deal - we don’t store client IP addresses never, ever. We will continue to abide by our privacy commitment and ensure that no user data is sold to advertisers or used to target consumers.

Sound like something you’d like to be a part of? We’d love to hear from you!

Please note that applicants who progress to the offer stage of the interview process may be asked to attend an in-person interview within one of the Cloudflare Offices or Cloudflare Hubs.  More details about this will be available at that stage of the interview process.

This position may require access to information protected under U.S. export control laws, including the U.S. Export Administration Regulations. Please note that any offer of employment may be conditioned on your authorization to receive software or technology controlled under these U.S. export laws without sponsorship for an export license.

Cloudflare is proud to be an equal opportunity employer.  We are committed to providing equal employment opportunity for all people and place great value in both diversity and inclusiveness.  All qualified applicants will be considered for employment without regard to their, or any other person's, perceived or actual race, color, religion, sex, gender, gender identity, gender expression, sexual orientation, national origin, ancestry, citizenship, age, physical or mental disability, medical condition, family care status, or any other basis protected by law. We are an AA/Veterans/Disabled Employer.

Cloudflare provides reasonable accommodations to qualified individuals with disabilities.  Please tell us if you require a reasonable accommodation to apply for a job. Examples of reasonable accommodations include, but are not limited to, changing the application process, providing documents in an alternate format, using a sign language interpreter, or using specialized equipment.  If you require a reasonable accommodation to apply for a job, please contact us via e-mail at hr@cloudflare.com or via mail at 101 Townsend St. San Francisco, CA 94107.