Sr. Counsel, Privacy Compliance

GAQ327R249

About the Team

Databricks is at the forefront of data and AI innovation, and our Legal team plays a vital role in supporting this mission. We are dedicated to navigating complex legal landscapes and ensuring compliance within the rapidly evolving technology sector. Our team is composed of diverse legal professionals with expertise in technology, privacy, intellectual property, corporate law, cybersecurity, employment law, tax, regulatory compliance, and litigation.

About the Role

Databricks is seeking a talented and experienced Senior Counsel, Privacy to serve as a trusted advisor across the business. In this role you will own and mature our privacy program, lead legal initiatives that deliver cutting-edge, practical legal advice as we navigate rapidly evolving global privacy and AI laws. Reporting to the Director & Assistant General Counsel, Privacy, you will develop AI-enabled solutions for operating and maturing the privacy processes and controls that keep Databricks compliant.

You will be agile and highly organized, with the skills, drive, and flexibility to build and scale a program at a leading technology company, addressing cutting-edge legal issues and organizational challenges. A successful candidate will be an AI proficient builder, resourceful self-starter, comfortable working in a fast-paced and dynamic environment, and excellent at building strong relationships and driving cross-functional execution.

The impact you will have

• Legal advice and regulatory interpretation. Advise on compliance with global privacy and data protection laws (e.g., GDPR, CCPA/CPRA, ADMT, and other U.S. state laws, Monitor legal and regulatory developments, and translate them into actionable guidance for the business.
• Privacy Program & Governance Leadership: Build and mature Databricks’ privacy program to continue meeting evolving regulatory expectations, including contributions to AI governance. Develop core program components for compliance with new regulations, including data subject rights requests, privacy notices, consent management, PIA/DPIAs, and policy management.
• Risk assessments. Conduct gap analysis and risk assessments, including Data Protection Impact Assessments (DPIAs), Privacy Impact Assessments (PIAs), and transfer impact assessments to identify, assess, and help mitigate privacy risk, and support the organization's records of processing activities (RoPA).
• Contract Negotiation and Transactions: Draft and update form agreements, and counsel on and negotiate data protection provisions in commercial contracts, including data processing addendums (DPAs), standard contractual clauses (SCCs), and related data-transfer instruments.
• Policies, training, an