Prolific
Legal Counsel (Data Protection)
Job Summary
This role involves supporting and leading data protection compliance across the business, with a focus on UK and EU data privacy laws and frameworks such as GDPR and PECR. The candidate will provide practical legal advice, contribute to the continuous improvement of data privacy programs, and assist with compliance activities including DPIAs, LIAs, and breach management. Strong communication skills and experience negotiating commercial contracts related to data protection are essential. The position offers the opportunity to work within a fast-paced, innovative company at the forefront of AI and human data infrastructure development.
Required Skills
Benefits
Job Description
Prolific
Prolific is not just another player in the AI space – we are the architects of the human data infrastructure that's reshaping the landscape of AI development. In a world where foundational AI technologies are increasingly commoditized, it's the quality and diversity of human-generated data that truly differentiates products and models.
The role
You will support and, where appropriate, lead in the ongoing implementation and oversight of data protection compliance across the business. You will play a key role in enabling growth and innovation - supporting the business’ commercial and strategic aims - while ensuring that personal data is managed in accordance with data protection laws, regulations and best practices. Prolific is a fast-paced, agile business that is growing quickly. You will need to be a self-starter, and adaptable and dynamic, with excellent and succinct communication skills. Given the pace and scope of work, you may be required to support other areas of commercial legal work as needed. You’ll work seamlessly as part of the legal team to help drive a culture of privacy, transparency and accountability, while carefully balancing this against the business’ commercial goals.
What you’ll be doing in the role
- Building a good understanding of Prolific’s operations and objectives, and how data privacy compliance can support and enable these
- Providing clear, practical, and commercially-focused advice on a wide range of data privacy matters in a business where robust data protection is critical to our operations
- Contributing to the continuous improvement of the company’s data privacy programme, ensuring it remains robust, effective, and aligned with evolving legal requirements and business needs
- Supporting compliance activities, including conducting Data Protection Impact Assessments (DPIAs), Legitimate Interests Assessments (LIAs), and maintaining Records of Processing Activities (RoPA), seeking input from relevant stakeholders
- Developing and delivering internal training and communications, building awareness and embedding a privacy-first culture across the business
- Advising on data privacy and wider regulatory considerations associated with AI development and deployment, ensuring alignment with evolving AI regulatory frameworks
- Assisting with data incident and breach management in a timely and collaborative manner, and supporting complex data subject requests, including subject access and deletion requests
- Monitoring the effectiveness of privacy controls and processes, tracking key trends, and assisting with the preparation of reports for management
- Reviewing, drafting, and negotiating commercial contracts with customers and suppliers
- Supporting the legal team’s broader commercial work and advising on a range of related legal issues
What you’ll bring to the role
- Qualified solicitor or barrister
- Minimum 3 years’ PQE
- Extensive experience advising on UK data protection laws, including for tech and digital businesses, in an in-house or private practice role (with this forming the main part of your role over the past 3+ years)
- A comprehensive and nuanced understanding of UK and EU data protection and privacy frameworks, including UK/EU GDPR, PECR, and related regulations
- An ability to provide pragmatic, commercially-focused advice that supports and enables business initiatives
- Highly skilled in reviewing, negotiating, and advising on data protection aspects of commercial contracts
- An ability to communicate complex legal issues clearly and succinctly, and advise and collaborate with stakeholders at all levels
- An energetic and proactive approach, with a willingness to take initiative and solve problems
Even better if you have
- Wider legal/commercial contract experience; comfortable reviewing and negotiating different types of contract
- Dual UK/US qualified, or experience advising on US data protection and privacy frameworks and practices
- Experience advising on the legal aspects of AI development and deployment
Why Prolific is a great place to work
We've built a unique platform that connects researchers and companies with a global pool of participants, enabling the collection of high-quality, ethically sourced human behavioral data and feedback. This data is the cornerstone of developing more accurate, nuanced, and aligned AI systems.
We believe that the next leap in AI capabilities won't come solely from scaling existing models, but from integrating diverse human perspectives and behaviors into AI development. By providing this crucial human data infrastructure, Prolific is positioning itself at the forefront of the next wave of AI innovation – one that reflects the breath and the best of humanity.
Working for us will place you at the forefront of AI innovation, providing access to our unique human data platform and opportunities for groundbreaking research. Join us to enjoy a competitive salary, benefits, and remote working within our impactful, mission-driven culture.
Links to more information on Prolific
Privacy Statement
By submitting your application, you agree that Prolific may collect your personal data for recruiting and global organisation planning. Prolific's Candidate Privacy Notice explains what personal information Prolific may process, where Prolific may process your personal information, its purposes for processing your personal information, and the rights you can exercise over Prolific use of your personal information.
Prolific
Prolific helps AI developers, researchers, and organizations easily access the highest-quality human data. Sign up for free.
See more jobsSafe Remote Job Search Tips
Verify Employer Thoroughly
Research the company's identity thoroughly before applying. Check for a professional website with contacts, active social media, and LinkedIn profiles. Verify details across platforms and look for reviews on Glassdoor or Trustpilot to confirm legitimacy.
Never Pay to Get a Job
Legitimate employers never require payment for applications, training, background checks, or equipment. Always reject upfront payment requests or demands for bank details, even if they claim it's for purchasing necessary work gear on your behalf.
Safeguard Your Personal Information
Protect sensitive data like SSN, bank details, or ID copies. Share this only after accepting a formal, written job offer. Ensure it's submitted via a secure company system or portal, never through insecure channels like standard email attachments.
Scrutinize Communication & Interviews
Watch for communication red flags: poor grammar, generic emails (@gmail), vague details, or undue pressure. Be highly suspicious of interviews held only via text or chat apps; legitimate companies typically use video or phone calls.
Beware of Unrealistic Offers
If an offer's salary or benefits seem unrealistically high for the work involved, be cautious. Research standard pay for similar roles. Offers that appear 'too good to be true' are often scams designed to lure you into providing information or payment.
Insist on a Formal Contract
Always secure and review a formal, written job offer or employment contract before starting work or sharing final personal details. Ensure it clearly defines your role, compensation, key terms, and conditions to avoid misunderstandings or scams.