Privacy Counsel

Overview

As Privacy Counsel at British Airways, you provide expert privacy and data protection advice across the business, integrating privacy into decision‑making and technology initiatives. You’ll shape governance, assess AI and data risks, and support the privacy programme from the outset. Collaborating with stakeholders, you turn privacy requirements into practical controls and workflows. This role blends legal, technical and governance work within the Legal team to help BA use data responsibly and compliantly.

Pay / Benefits

• staff travel benefits including unlimited basic and premium standby tickets
• up to 30 discounted Hotline airfares per year
• opportunities for progression and internal mobility
• inclusion and diversity culture

Responsibilities

• Provide expert privacy and data protection guidance across the business (GDPR, AI, data governance, emerging regulation)
• Lead privacy assessments to identify, assess and manage privacy risks on projects and activities
• Maintain and evolve BA's privacy governance framework (records of processing, policies, controls, assurance docs)
• Support management of privacy incidents, investigations, regulatory enquiries, complaints and breach reporting
• Build strong stakeholder relationships, delivering training and privacy-by-design guidance
• Support the Data Protection Officer, oversee privacy performance and contribute to the privacy programme development

Key requirements

• Strong expertise in privacy, data protection and risk management with practical, commercially oriented advice
• Experience conducting DPIAs and PIAs, maintaining governance frameworks and supporting compliance programmes
• Ability to assess risk, exercise sound judgment and balance legal obligations with business priorities
• Strong stakeholder management and influencing skills across teams and seniority levels
• Excellent communication skills to explain complex issues
• Proactive, organized with ability to manage multiple priorities and deliver high-quality outcomes

• Stakeholder management
• Clear communication
• Proactivity and organization
• Privacy by design
• DPIA/PIA concepts
• Governance frameworks and records of processing

Full job description from WhatJobs. Apply for this role →