Associate General Counsel, Privacy Compliance

About Us At Cloudflare, we are on a mission to help build a better Internet. Today the company runs one of the world’s largest networks that powers millions of websites and other Internet properties for customers ranging from individual bloggers to SMBs to Fortune 500 companies. Cloudflare protects and accelerates any Internet application online without adding hardware, installing software, or changing a line of code. Internet properties powered by Cloudflare all have web traffic routed through its intelligent global network, which gets smarter with every request. As a result, they see significant improvement in performance and a decrease in spam and other attacks. Cloudflare was named to Entrepreneur Magazine’s Top Company Cultures list and ranked among the World’s Most Innovative Companies by Fast Company. At Cloudflare, we’re not looking for people who wait for a polished roadmap; we’re looking for the builders who see the cracks in the Internet that everyone else has simply learned to live with. We value candidates who have the instinct to spot a "normalized" problem and the AI-native curiosity to create a solution using the latest tools. Our culture is built on iteration, leveraging AI to ship faster today to make it better tomorrow, while ensuring that every improvement, no matter how small, is shared across the team to lift everyone up. If you’re the type of person who values curiosity over bureaucracy, and that AI is a partner in solving tough problems to keep the Internet moving forward, you’ll fit right in. Available Locations London, UK About this Role Ensuring the privacy of personal information is core to Cloudflare’s mission to help build a better Internet. We’re looking for an experienced counsel to help Cloudflare navigate the complicated challenges of processing personal data amid an ever-changing and diverse regulatory landscape. Specifically, you will oversee the functions of Cloudflare’s Office of the Data Protection Officer to manage the company’s existing privacy program and ensure the company continues to comply with all applicable data protection and privacy laws, including the EU General Data Protection Regulation (“GDPR”). You will also be responsible for overseeing Cloudflare’s responsible AI program and compliance requirements stemming from AI regulations, including the EU AI Act. Your focus will be on building, implementing, and maintaining privacy program and AI program elements, including working closely with the non-lawyers on the Data and Privacy Operations team to implement these programs. We are looking for an exceptionally talented, energetic and friendly privacy attorney to join our team based in London. This role is ideal for someone who is a proactive self-starter and strategic thinker, who has a thirst for knowledge and continued growth, all while working as part of a great team. This position reports to Cloudflare’s Chief Privacy Officer. Responsibilities Be the subject matter expert on existing and emerging AI and data protection regulations or guidance in the EMEA region, with a focus on the jurisdictions where Cloudflare has offices (multiple locations in the EU, UK, Switzerland, and UAE). You will work collaboratively across multiple functions to advise on the impact of such regulations or guidance on Cloudflare’s business. Understand and advise on the requirements related to cross-border data transfers globally. Collaborate with and advise product lawyers on Cloudflare’s privacy by design policies. Advise the Data and Privacy Operations team on handling data subject requests, records of processing activities, privacy and AI impact assessments, and more. Advise the Data and Privacy Operations team on conducting and approving privacy and AI vendor reviews. Support the commercial transactions legal team in negotiating data processing addendums and similar contractual language under global privacy laws. Support the corporate legal team on data and privacy-related due diligence for M&A transactions as well as supporting post-acquisition integration tasks related to privacy and AI compliance. Advise on data protection implications of and legal requirements applicable to security and privacy incidents, exercising judgment and discretion while advising cross-functional teams on incident handling procedures and communications. Create and contribute to playbooks and FAQ libraries for various teams to ensure they have the most current guidance related to privacy, data governance, an