Role description:
We are looking for a practical and collaborative Data Privacy Legal Counsel to join our growing legal team. This role will focus on supporting Fonoa’s compliance with global data protection laws and embedding privacy into our products, processes, and commercial agreements. The ideal candidate will have experience advising on data privacy matters in the technology or SaaS industry, with solid contract negotiation skills and a willingness to learn and grow in a fast-paced environment.
This is a great opportunity for a lawyer looking to deepen their expertise in privacy and technology law, while gaining broad exposure to commercial and operational legal issues within an international SaaS business. The role will report directly to Fonoa’s General Counsel and work closely with our product, security, and engineering teams.
What you will do:
Draft, review, and negotiate data protection and privacy-related contractual terms, including Data Processing Agreements (DPAs), Standard Contractual Clauses, and customer/vendor data privacy addenda.
Provide practical advice on data protection and security terms to support sales and vendor contracting processes.
Assist with internal privacy compliance projects, such as updating policies, records of processing, and retention schedules.
Support cross-functional teams (product, engineering, and security) on implementing privacy-by-design principles.
Help manage privacy-related due diligence, including responding to customer and vendor privacy/security questionnaires.
Conduct initial assessments for Data Protection Impact Assessments (DPIAs) and escalate issues as appropriate.
Monitor developments in global privacy laws from the perspective of Fonoa’s global product suite and highlight key changes to the legal team.
Contribute to team initiatives that come with being part of a fast-moving, scaling technology company.
This Role Will Be a Great Fit If You
Have 2–4 years of post-qualification experience in data protection, privacy, or commercial contracting (ideally in SaaS/technology).
Possess a good understanding of GDPR and other key global data protection laws (CCPA/CPRA, LGPD, etc.).
Eagerness to step out of the comfort zone, research global data privacy legislation and coordinate local external privacy counsels
Have some experience negotiating privacy and data protection terms in contracts.
Communicate clearly and confidently, able to explain complex privacy topics to non-lawyers.
Are highly organised and detail-oriented, able to manage multiple matters simultaneously.
Are eager to develop your expertise in data privacy, technology, and AI regulation?
Hold a law degree and qualification in the EU, UK, US, or another relevant jurisdiction.
Privacy certifications (CIPP/E, CIPM, etc.) are a plus, but not required.
As part of the recruitment process at Fonoa, we process your personal data in accordance with our Privacy Notice for Job Applicants. This notice explains how and why your data is collected and used, and how you can contact us if you have any concerns.
Top Skills
What We Do
Fonoa is a global tax automation and compliance solution provider that helps companies streamline the entire transactional chain. We empower digital businesses to easily handle tax compliance with solutions like tax calculations, invoicing, tax ID validations and more – all from one platform.
With Fonoa, your company can:
- Instantly validate tax ID numbers from 95+ countries
- Report transactions in accordance with local tax law, including DAC7
- Apply the correct indirect and withholding tax treatment to each transaction
- Issue custom-branded tax invoices in locally compliant languages and formats
- Automatically populate tax returns ready for filing
- Maintain compliance at scale
See why companies like Zoom, Uber, Booking, and Remote.com trust Fonoa to automate and manage their global tax obligations.
