Privacy Lawyer📣 Job Ad

About the Role

Moritz is seeking a skilled Privacy Lawyer to join its global network as an independent contractor. This role requires a minimum of 5 years of experience in privacy and data protection law, focusing on delivering high-quality commercial legal infrastructure for clients across various international markets.

About Moritz

Moritz is an AI-native global law firm dedicated to building the next generation of commercial legal infrastructure. The firm combines proprietary AI tooling with a curated network of senior commercial lawyers to provide vetted contract work at a speed and price point that traditional firms cannot match. Moritz serves clients globally across Europe, the US, and Australia, with active expansion into new markets, including public procurement work. The firm has successfully raised a $9M seed round from notable investors including Y Combinator, 20VC, and over 20 unicorn founders.

Key Responsibilities

• Serve as co-counsel for Moritz's privacy and data protection work in Saudi Arabia, covering GDPR, UK GDPR, and CCPA compliance, data processing agreements, international data transfers, DPIAs, and marketing and cookie compliance.
• Lead the drafting, review, and negotiation of Data Processing Agreements (DPAs), Standard Contractual Clauses (SCCs), joint controller arrangements, and privacy terms in commercial contracts for clients ranging from startups to midsize and enterprise companies.
• Advise clients on the privacy implications of deploying AI systems, including training data, automated decision-making, transparency obligations, and the intersection of data protection law with the EU AI Act and equivalent regulations.
• Support incident response activities, including breach assessment, notification obligations, regulator engagement, and remediation efforts.
• Commit to meeting established Service Level Agreements (SLAs), such as a 24-hour turnaround, when work is accepted under such terms.

Required Qualifications and Experience

• Experience: A minimum of 5 years practising privacy or data protection law, gained either in private practice or in-house.
• Regulatory Knowledge: Deep familiarity with GDPR, UK GDPR, and CCPA, with an ideal understanding of one or more of HIPAA, financial services data rules, or other sector-specific regimes.
• International Transfers Expertise: Demonstrated knowledge of SCCs, transfer impact assessments, adequacy decisions, and the practical mechanics of cross-border data flows.
• AI and Privacy Knowledge: Working knowledge of privacy considerations related to AI, including training data, profiling, automated decision-making, and the interplay between the EU AI Act and GDPR.
• Approach: A practical, risk-based approach to translating regulatory requirements into actionable decisions for product teams. Privacy certifications (*, CIPP/E) are considered a plus.
• Licensure: An active license and good standing with the bar or law society of Saudi Arabia. Professional indemnity insurance must be maintained or willing to be obtained in line with local requirements.

Engagement Model

Moritz engages co-counsel on an independent contractor basis to support client matters under the firm's supervision and quality standards. Moritz handles client intake, billing, conflicts checks, and matter management, enabling co-counsel to focus primarily on legal work. The volume of work is dependent on the scope of client engagements and may increase over time, with decisions regarding acceptance, continuation, or expansion made jointly. The platform is web-based, requiring only a reliable internet connection and word processing software, with devices needing to meet security requirements shared during onboarding.

Application Process

Candidates interested in this independent contractor role are invited to submit their qualifications for consideration.