Senior Counsel, Privacy & AI Compliance (EU)

What You’ll Do:

The Legal and Government Affairs team at CoreWeave is highly collaborative and partners closely with teams across the company to navigate complex legal landscapes while enabling innovation and growth. The team is pragmatic, solutions-oriented, and deeply engaged in strategic decision-making, with a strong emphasis on building trusted relationships across the organization.

As Senior Counsel, Privacy & AI Compliance (EU), you will serve as a key legal advisor on European privacy, data protection, and artificial intelligence requirements. If you thrive in a dynamic, fast-paced environment, enjoy solving complex problems, and are eager to make a significant impact, CoreWeave is the place for you.

About the role:

Reporting to the Senior Director & Lead Managing Counsel, Privacy, Regulatory & Compliance, you will independently advise on complex regional matters, help operationalize evolving legal requirements, and partner closely with Privacy, Product, Engineering, Security, Commercial Legal, Government Affairs, and business teams across Europe. You will play a central role in scaling practical, risk-based privacy and AI compliance frameworks for CoreWeave’s cloud infrastructure, products, and European operations.

In this Role You Will:

• Advise on EU and UK privacy, data protection, and AI laws and regulatory developments, including the GDPR, UK GDPR, ePrivacy requirements, the EU AI Act, the EU Data Act, and related national implementing laws and guidance.
• Translate complex legal requirements into clear, practical, and scalable guidance for Product, Engineering, Security, Commercial, Marketing, HR, Procurement, and operational teams across Europe.
• Lead or support privacy and AI assessments for new and evolving products, features, data uses, vendors, and business initiatives, including DPIAs, legitimate-interest assessments, transfer impact assessments, AI risk and classification analyses, and documented compliance decisions.
• Partner with Product and Engineering to embed privacy by design and default, responsible AI, data minimization, transparency, security, retention, and governance requirements into product architecture and development processes.
• • Advise on international data transfers, data localization and residency requirements, cross-border access, and related contractual and operational mechanisms, including EU Standard Contractual Clauses and the UK International Data Transfer Addendum or Agreement.
• Support implementation of CoreWeave’s AI compliance framework in Europe, including role and use-case classification, risk management, transparency, recordkeeping, human oversight, technical documentation, contractual allocation of responsibilities, and governance for internal and customer-facing AI uses.
• Provide regional guidance on data subject rights, records of processing, privacy notices, consent and cookies, retention and deletion, data sharing, direct marketing, and other core privacy program requirements.
• Advise on European product launches, market entry, strategic partnerships, customer and vendor arrangements, and commercial terms involving privacy, data use, AI, and regulatory responsibility.
• Support cybersecurity and privacy incident response in Europe, including assessment of regulator and data subject notification obligations, engagement with relevant stakeholders, and documentation of defensible legal decisions.
• Lead or support responses to inquiries, audits, consultations, and investigations involving European data protection authorities, AI regulators, and other governmental bodies; coordinate with local counsel and drive follow-up and remediation.
• Develop and maintain regional policies, procedures, playbooks, training, control mappings, and evidence of compliance, and monitor emerging legal and enforcement trends to inform business strategy and program priorities.

Who You Are:

• 4+ years of relevant legal experience, including substantial experience advising on European privacy and data protection matters; a mix of law firm, regulatory, and in-house experience is preferred.
• Qualified to practice law in an EU member state or the United Kingdom and in good standing with the applicable professional body.
• Strong working knowledge of the GDPR and UK GDPR, including controller and processor obligations, privacy-by-design requirements, data subject rights, international transfers, DPIAs, security and breach notification, and regulator engagement.
• Meaningful experience with AI governance or emerging AI regulation, including the ability to interpret and operationalize the EU AI Act for technology, cloud, infrastructure, or enterprise use cases.
• Demonstrated ability to independently manage complex regional matters, identify material risk, present practical options, and make clear, defensible recommendations in ambiguous situations.
• Experience building or operationalizing privacy and AI compliance programs through policies, assessments, controls, training, governance processes, monitoring, and audit-ready documentation.
• Technical fluency and the ability to understand data flows, cloud architecture, product functionality, AI systems, and security practices and translate them into actionable legal guidance.
• Excellent drafting and communication skills, with the ability to explain complex legal requirements clearly and influence technical, commercial, and business stakeholders across jurisdictions.
• Proven ability to build trusted cross-functional relationships, manage multiple priorities, and work effectively in a fast-paced, rapidly scaling global environment.

Preferred:

• Experience advising a high-growth cloud, AI, SaaS, data center, infrastructure, or other technology company.
• Experience engaging with European data protection authorities, AI regulators, standards bodies, industry groups, or external counsel on novel technology issues.
• Experience advising on cross-border data transfers, cloud service provider obligations, enterprise AI governance, and the allocation of regulatory responsibilities between providers and customers.
• Familiarity with recognized privacy, security, and AI governance frameworks or standards, such as ISO/IEC 27701, ISO/IEC 42001.

Wondering if you’re a good fit? We believe in investing in our people, and value candidates who can bring their own diversified experiences to our teams – even if you aren't a 100% skill or experience match. Here are a few qualities we’ve found compatible with our team. If some of this describes you, we’d love to talk.

• You remain calm under pressure and can make sound, defensible decisions when facts are still developing