Privacy & Data Protection Counsel

About the role

Mastercard’s global Commercial and New Payment Flows (CNPF) Privacy team is looking for a Counsel to provide legal support for its money‑transfer solutions. Based in London, the role will advise on privacy, AI and data‑protection matters across the full product lifecycle, ensuring new domestic and cross‑border payment services comply with global regulations.

Key responsibilities

• Provide day‑to‑day privacy advice to product and business teams, handling queries and operational issues.
• Prepare guidance, assessments and initial reviews for product initiatives and market expansions, including Move (Mastercard Send and Cross‑Border Services).
• Advise on data use, AI‑enabled products, data flows and controller/processor roles within multi‑party ecosystems.
• Embed Privacy by Design through impact assessments, risk screenings and alignment with Mastercard’s privacy and AI governance frameworks.
• Support responses to government data requests, RFIs and CDD inquiries by gathering inputs and drafting replies.
• Negotiate data‑protection terms in commercial agreements and track regulatory developments.

Required profile

• Qualified lawyer with solid experience in privacy, data‑protection and AI governance, preferably in financial services or digital payments.
• Demonstrated ability to operate at both strategic and operational levels, delivering clear, practical advice.
• Strong understanding of digital‑payment products, financial‑technology ecosystems and data‑driven systems.
• Experience embedding Privacy by Design into product development and commercial contracts.

Required skills

• Expertise in privacy and data‑protection legislation (e.g., GDPR, UK Data Protection Act).
• Knowledge of AI governance frameworks and their application to products.
• Ability to analyse data flows and assess regulatory impact.
• Negotiation skills for data‑protection clauses in commercial agreements.