Senior Legal Counsel - Data Protection & Privacy

Senior Legal Counsel – Data Protection & Privacy This is a senior legal role within Sky’s Group Data Privacy function, supporting the delivery of Sky’s data protection strategy and governance framework with a specific focus on AI adoption and usage. Reporting to the Head Counsel – Data Protection & Privacy, you will play a key role in advising on complex UK and EU data protection matters, translating legal requirements into practical, operational guidance and supporting the implementation of scalable governance across the business.

You will work across a broad range of data, digital and AI-related issues, partnering closely with Legal, Data Protection Operations, Cyber, Technology, Sky Data and Commercial teams to ensure that Sky’s data use is compliant, responsible and enables innovation and growth. The role also supports cross-market alignment across the UK, Ireland and Italy, helping to embed consistent legal standards while recognising local regulatory requirements.

What You’ll Do Legal Advice & Support Provide high-quality, pragmatic legal advice on UK GDPR, EU GDPR, ePrivacy, AI-related privacy issues and related data protection laws in connection with Sky’s use of customer, workforce and contributor data. Lead or support the Head Counsel on complex, high-risk and strategic matters, including product launches, commercial initiatives and regulatory issues.

Provide practical, risk-based advice to business stakeholders on BAU data protection issues. Support the development of clear, defensible legal positions and documentation. AI & Emerging Regulation Lead or materially contribute to legal assessment and practical solutions for complex AI and data-driven use cases, ensuring compliance with GDPR, privacy by design principles and emerging AI regulation while enabling responsible innovation.

Support Sky’s readiness for the EU AI Act, cyber regulation and other emerging digital regulation. Develop creative, pragmatic and legally defensible approaches to novel AI, , cyber and digital regulatory challenges, balancing regulatory risk with commercial objectives. Contribute to horizon scanning and translate regulatory developments into practical guidance. Legal Governance & Framework Implementation Support the implementation of the Group’s data protection legal framework across business areas.

Advise on DPIAs, LIAs, data sharing, international transfers, retention and high-risk processing activities. Help ensure consistency and quality in legal advice and decision-making across teams. Identify recurring risk themes and support remediation and process improvement. Partnership with Data Protection Operations Work closely with the DPO and DP Operations teams and related business operational teams to align legal requirements with operational processes.

Support the embedding of scalable policies, controls and governance mechanisms. Advise on data incident and breach response where required. Help define and apply legal guardrails and escalation thresholds in practice. Contribute to a “one privacy function” approach across legal and operational teams. Consent, Marketing & Digital Advise on consent frameworks, customer preferences and marketing practices.

Support legal oversight of digital products, advertising technology and data-driven use cases. Ensure compliance with legal and regulatory expectations on transparency, fairness and customer rights. Cross-Market Collaboration Work with local market legal and DP teams in Ireland and Italy to support consistent application of standards. Provide input on cross-border data protection issues and regulatory developments.

Help promote best practice and knowledge sharing across markets. Regulatory & Risk Support Support engagement with regulators (e.g. ICO, DPC) including responses to queries and investigations. Assist with regulatory submissions and documentation. Ensure robust record-keeping and defensible decision-making. Team Contribution & Development Contrib