Privacy Counsel and Data Protection Officer

The role

You will own the privacy programme across all markets and capture models. You will act as the Data Protection Officer to advise the company on data protection obligations and monitor compliance.

What you will do

• Maintain and build the privacy and data protection programme across all markets and capture models.
• Develop and deliver privacy training for employees, contractors, partners, and stakeholders.
• Independently advise the company and personnel on data protection requirements.
• Monitor compliance with applicable laws and internal policies.
• Advise on data protection impact assessments and report material privacy risk.
• Serve as the point of contact for data subjects and supervisory authorities.
• Own the consent and transparency framework for contributors, venue owners, and bystanders.
• Implement and monitor transfer mechanisms for cross-border data.
• Partner with engineering, product, security, and quality teams on privacy by design.
• Lead the response to data incidents, data subject requests, complaints, and regulator inquiries.

Required qualifications

• Law degree and admission to practice in at least one jurisdiction.
• 5 to 8+ years of privacy and data protection practice.
• Experience at a top tier law firm and in-house at a high-growth technology, marketplace, AI, or data company.
• Demonstrated ability to perform the DPO function independently and objectively.
• Ability to communicate directly with senior management and regulators.
• Hands-on experience advising on data protection regimes in several countries at once.
• Ability to translate complex privacy requirements into practical controls for engineering, operations, and delivery teams.

Nice to have

• Experience with video, image, biometric, or location data, or with datasets collected or processed for machine learning training.
• A privacy certification such as CIPP/E, CIPP/A, or CIPM.
• In-house experience at a marketplace, delivery, AI, data, or gig platform operating across emerging markets.
• SOC 2 compliance or audit-readiness initiatives.
• Experience communicating with data protection authorities, responding to regulatory inquiries, and managing multi-jurisdictional personal data incidents.

About the company

Mecka AI is building the data infrastructure layer for robotics and embodied AI. They design and operate global systems for data capture, data labeling, and hardware-enabled workflows.