Senior Counsel, Data Privacy (Bangkok-based, Relocation provided)
About this role
Guiding the privacy strategy for Agoda involves collaborating closely with global Product, Marketing, Tech, and Customer Experience teams to manage legal risk across data privacy, cybersecurity, and artificial intelligence. The daily work centers on reviewing product initiatives, conducting privacy impact assessments, advising on marketing and AdTech strategies, negotiating data protection agreements, and leading privacy legal advisory for the deployment of generative AI and machine learning models.
Operating within a dynamic travel technology environment, the legal team tackles multi-jurisdictional privacy and AI challenges at a massive consumer tech scale. Professionals who excel here combine technical legal expertise with commercial pragmatism, translating complex global regulations into scalable product requirements that support business growth while maintaining consumer trust.
What you will do
- Partner proactively with Product and Tech teams from concept to launch to conduct privacy impact assessments and establish practical product requirements.
- Navigate complex privacy considerations to provide actionable counsel for conventional and modern marketing strategies and AdTech initiatives.
- Draft and negotiate privacy provisions, data protection agreements, and templates while designing self-service guidelines and negotiation playbooks.
- Contribute to regulatory change management projects and support compliance efforts for new and amended data protection laws.
- Collaborate with the Privacy Program team to manage key aspects of privacy programs, audits, and reporting obligations.
- Lead privacy legal advisory on the deployment of generative AI and machine learning models while conducting related risk assessments.
- Provide general privacy support for relevant inquiries, authority demands, and data subject rights escalations.
What you need
- Hold at least 6 years of post-qualification experience, including a minimum of 2 years spent at a reputable law firm.
- Possess a law degree from a top law school supported by excellent academic credentials.
- Demonstrate deep practical knowledge of major international privacy laws such as GDPR, CCPA, PDPA, PIPA, APPI, DPDPA, and PIPL.
- Exhibit excellent drafting, negotiation, communication, and stakeholder management skills.
- Show demonstrated experience building trust and influencing cross-functional partners in a culturally diverse, matrixed environment.
- Bring strong strategic and commercial risk calibration abilities to the legal team.
Nice to have
- A data privacy qualification such as CIPP or willingness to obtain one shortly after joining
- Legal qualification in Singapore, England, or another common law jurisdiction
- Practical, solution-oriented approach to legal advice
- Experience working in a tech company or with technology-driven products
Benefits
- Relocation support available for eligible international candidates moving to Bangkok
Skills and tech stack
Questions candidates ask
Is remote work available for this position?
Remote work or working from locations outside of Bangkok is not available for this role. The position is Bangkok-based, though relocation support is provided for eligible international candidates.
What kind of teams will I work with?
You will collaborate closely with global Product, Marketing, Tech, and Customer Experience teams, acting as an embedded partner to guide privacy strategy.
What legal expertise is required?
Candidates need deep practical knowledge of major international privacy laws like GDPR, CCPA, PDPA, PIPA, APPI, DPDPA, and PIPL, alongside at least 6 years of post-qualification experience.