About this role
Waymo needs a dedicated legal expert to establish a robust privacy framework and ensure strict regulatory adherence for autonomous driving operations expanding into Germany and the broader European Union. Operating as the primary on-the-ground counsel, this professional will guide the organization through complex compliance landscapes involving local laws, the GDPR, and emerging European frameworks like the AI Act. The legal team collaborates closely with engineering, product, safety, and public policy units to navigate uncharted regulatory territory and protect corporate interests from technology ideation through commercial deployment.
Working out of the Munich office in a hybrid arrangement, the person in this role will act as a trusted advisor on Privacy by Design, coordinate with regional data protection authorities, and manage localized incident responses. Success requires deep familiarity with European data protection mandates, fluency in translating abstract statutes into actionable engineering specifications, and the capability to communicate complex legal risks to diverse technical stakeholders.
What you will do
- Serve as the primary on-the-ground privacy counsel for operations, product launches, and engineering initiatives across Germany and the broader EU.
- Advise product, engineering, and AI/ML teams on Privacy by Design and data minimization for complex sensor data and model training.
- Build and maintain constructive relationships with European Data Protection Authorities as the main legal contact for regulatory inquiries and audits.
- Lead rapid localized legal responses for EU data incidents by coordinating internal investigations and managing strict notification timelines.
- Partner with public policy and regulatory affairs teams to monitor emerging European privacy legislation and shape advocacy strategies.
What you need
- Possess a Juris Doctor or equivalent law degree with active qualification to practice law in Germany or another relevant EU jurisdiction.
- Bring at least 7 years of legal experience with significant expertise in European privacy, data protection, and regulatory compliance.
- Demonstrate deep practical expertise in the General Data Protection Regulation and German national data protection laws.
- Have direct experience engaging with European Data Protection Authorities and working with regulatory bodies to navigate compliance readiness.
- Show hands-on experience advising on cross-border data transfers and translating strict legal requirements into practical engineering specifications.
- Maintain professional fluency in both German and English with strong communication skills for presenting legal risks to leadership and technical teams.
Nice to have
- Recognized European privacy certifications such as CIPP/E, CIPM, or CIPT.
- Prior in-house experience at a US-based multinational technology company, autonomous vehicle developer, or AI-focused enterprise navigating EU expansion.
- Hands-on experience advising on the intersection of GDPR with emerging European technology and data regulations like the AI Act and Data Act.
- Experience structuring and defending main establishment strategies and data transfer frameworks for EU resident data.
- Background in privacy litigation, localized incident response, or managing comprehensive privacy compliance audits.
Skills and tech stack
Questions candidates ask
What is the work arrangement for this role?
This is a hybrid role based in Munich, Germany.
Who will I report to?
You will report into the Managing Counsel within the Legal team.
What language skills are required?
Professional fluency in both German and English is required for this position.