Senior Legal Counsel - Data Protection & Privacy

This is a senior legal role within Sky’s Group Data Privacy function, supporting the delivery of Sky’s data protection strategy and governance framework.

Reporting to the Head Counsel – Data Protection & Privacy, you will play a key role in advising on complex UK and EU data protection matters, translating legal requirements into practical, operational guidance and supporting the implementation of scalable governance across the business.

You will work across a broad range of data, digital and AI-related issues, partnering closely with Legal, Data Protection Operations, Cyber, Technology, Sky Data and Commercial teams to ensure that Sky’s data use is compliant, responsible and enables innovation and growth.

The role also supports cross-market alignment across the UK, Ireland and Italy, helping to embed consistent legal standards while recognising local regulatory requirements.

What You’ll Do

Legal Advice & Support

• Provide high-quality, pragmatic legal advice on UK GDPR, EU GDPR, ePrivacy, AI-related privacy issues and related data protection laws in connection with Sky’s use of customer, workforce and contributor data.
• Lead or support the Head Counsel on complex, high-risk and strategic matters, including product launches, commercial initiatives and regulatory issues.
• Advise on complex AI, data, cyber and emerging digital regulatory issues, translating legal requirements into practical business guidance.
• Provide practical, risk-based advice to business stakeholders on BAU data protection issues.
• Support the development of clear, defensible legal positions and documentation.

Legal Governance & Framework Implementation

• Support the implementation of the Group’s data protection legal framework across business areas.
• Advise on DPIAs, LIAs, data sharing, international transfers, retention and high-risk processing activities.
• Help ensure consistency and quality in legal advice and decision-making across teams.
• Identify recurring risk themes and support remediation and process improvement.

Partnership with Data Protection Operations

• Work closely with the DPO and DP Operations teams and related business operational teams to align legal requirements with operational processes.
• Support the embedding of scalable policies, controls and governance mechanisms.
• Advise on data incident and breach response where required.
• Help define and apply legal guardrails and escalation thresholds in practice.
• Contribute to a “one privacy function” approach across legal and operational teams.

Consent, Marketing & Digital

• Advise on consent frameworks, customer preferences and marketing practices.
• Support legal oversight of digital products, advertising technology and data-driven use cases.
• Ensure compliance with legal and regulatory expectations on transparency, fairness and customer rights.

Cross-Market Collaboration

• Work with local market legal and DP teams in Ireland and Italy to support consistent application of standards.
• Provide input on cross-border data protection issues and regulatory developments.
• Help promote best practice and knowledge sharing across markets.

Regulatory & Risk Support

• Support engagement with regulators (e.g. ICO, DPC) including responses to queries and investigations.
• Assist with regulatory submissions and documentation.
• Ensure robust record-keeping and defensible decision-making.

Team Contribution & Development

• Contribute to a collaborative, high-performing and inclusive team culture aligned with Sky’s Values.
• Provide coaching and support to junior team members where appropriate.
• Build strong relationships with stakeholders across Legal and the wider business.
• Support delivery of the Data Privacy team’s objectives and broader Legal priorities.

What You’ll Bring

Essential:

• UK or equivalent qualified lawyer with significant post-qualification experience advising on complex UK and EU data protection matters in-house and/or in private practice.
• Demonstrable experience influencing senior stakeholders and shaping strategic decisions on high-profile, business-critical privacy, data and AI initiatives.
• Deep expertise in UK GDPR, EU GDPR, ePrivacy and related regulatory frameworks, with the ability to apply legal principles creatively and pragmatically to complex business, technology and AI use cases.
• Experience advising on privacy issues relating to content services, advertising technology (AdTech), audience measurement, marketing technologies, digital products and data-driven customer experiences.
• Experience providing practical, risk-based legal advice to business stakeholders.
• Strong analytical skills and ability to translate complex legal requirements into clear guidance.
• Ability to work collaboratively across functions in a fast-paced environment.
• Commercial awareness and interest in data-driven business models.
• A positive, collaborative approach and enjoyment of working with stakeholders across the business.

Desirable:

• Experience in media, telecommunications, technology or digital sectors.
• Experience advising within a media, telecommunications or technology organisation operating across a broad range of services and products.
• Experience working in a large, matrixed organisation.
• Familiarity with cross-border data protection issues.
• Experience advising on AI, machine learning, advanced analytics or other complex data-driven use cases.
• Familiarity with emerging cyber and digital regulation.
• Experience advising on data protection issues in the content space (e.g. news, production, sports)  
• Experience supporting governance frameworks or transformation programmes.