Counsel, Data Privacy and Compliance

About

ADI is seeking an experienced lawyer to serve as Counsel, Data Privacy and Compliance that will report to the Chief Compliance Officer as part of the data privacy team headed by the Senior Counsel, Data Privacy. This role will be based in Munich, Germany. This role will work with global, cross-functional teams of in-house lawyers, paralegals and other legal and risk specialists and support staff.

PRIMARY DUTIES AND RESPONSIBILITIES

• Draft and negotiate Data Processing Agreements and privacy terms with vendors in collaboration with commercial counsel and information security teams.
• Manage privacy impact assessments, data protection assessments, and fundamental rights impact assessments.
• Coordinate the DSAR and “forget me” processes, including verification, cross-functional data collection, and recordkeeping.
• Contribute to incident response in partnership with information security on triage, notification analysis, and post-incident remediation tracking.
• Advise on cybersecurity best practices and resilience; support data mapping, retention, and classification initiatives; partner on data loss prevention efforts.
• Work with employment counsel and HR on the use of employee data in compliance with company policy and applicable law, maintain employee privacy policies.
• Conduct vendor diligence on personal data use, AI/ML features, and automated decision-making, and compliance with applicable data privacy and AI laws.
• Assist with general compliance tasks as needed. Work with IT and investigative counsel on insider threat management. Support conflict of interest reviews, employee data transfer approvals upon departure, background check adjudication, and other operational compliance items; maintain clear documentation and audit trails.
• Regulatory monitoring and enablement. Track relevant U.S. state and federal developments; prepare concise updates and practical guidance for stakeholders.
• Manage relationships with outside counsel as needed for specialized regulatory issues.

EXPERIENCE AND SKILLS

• Relevant experience focused on data privacy and corporate compliance (in-house or law firm), preferably supporting global operations.
• Substantive experience with day-to-day privacy program work (DSARs, DPIAs/assessments, DPA negotiation), employee data and policies in coordination with Employment Counsel; exposure to vendor diligence on personal data, AI/ML, and automated decision-making under GDPR, the EU AI Act, and other global laws with sound issue-spotting and timely escalation of novel or high-risk items.
• Experience assisting with incident response and a understanding of fundamental cybersecurity compliance concepts.

QUALIFICATIONS

• Strong academic credentials, qualified to practice law in Germany with outstanding educational and professional qualifications, two German law grade exams or a comparable qualification, additional American or English degree (e.g. LL.M.) or foreign admission to the bar desirable but not essential, plus 5+ years of privacy law and corporate compliance, preferably in a global environment
• Working knowledge of U.S. state privacy laws (e.g., CCPA/CPRA), GDPR fundamentals, and basic concepts in cybersecurity and incident response.
• Strong drafting, negotiation, and communication skills; high systems proficiency; ability to build business relationships and collaborate cross-functionally and across time zones.
• Ability to travel, as needed, both in region and internationally (up to 10%).
• High degree of systems proficiency (including MS Office Suite, Outlook and Internet applications).

#LI-RW1