Digital ECA and Privacy Consultant – Mid-Level/Senior

This is a fully remote position, open to applicants in Brazil.

📋 Description

• Oversee the assessment of the Digital ECA's relevance concerning products and features, supplying the legal foundation for client decisions.

• Organize and sustain a comprehensive inventory of digital products, features, and external parties impacted by the legislation.

• Direct Digital ECA-specific Data Protection Impact Assessments (DPIAs), pinpointing and categorizing risks and determining necessary controls and evidence.

• Prepare the regular DPIA reassessment cycle and the report mandated by Article 31 of the law.

• Provide guidance on age-assurance and parental-consent frameworks, evaluating alternatives and risks in collaboration with product and technology teams.

• Counsel on advertising, tracking, and cookie regulations applicable to children and adolescents across both web and mobile platforms.

• Organize reporting, appeals, and rights-request processes, including workflows, timelines, and accountable parties.

• Assist with third-party evaluations and manage serious breaches and incidents, including feature limitations or suspensions.

• Maintain a dossier of evidence to address inquiries from the ANPD.

• Facilitate workshops, meetings, and training sessions with legal, product, technology, and marketing teams.

• Keep abreast of ANPD laws, decrees, guidelines, and public consultations, making necessary updates to the framework.

• Translate requirements for technical teams and set up controls, attributes, questionnaires, rules, and forms in OneTrust.

• Keep the Data Protection Officer (DPO) informed about progress, risks, and interactions with the privacy program.

• Engage in Digital ECA and privacy initiatives across the client portfolio and assist with technical proposals.

• Document updates, decisions, and pending items via email, ensuring the management board is well-informed.

⛳️ Requirements

• Bachelor's degree in Law.

• Experience in privacy and data protection, either in a consultative role at a privacy law firm or within an in-house legal department.

• Practical understanding of Brazil’s LGPD: robust knowledge of processing children's and adolescents' data (Article 14), DPIAs, and legal bases, with a focus on practical application rather than purely theoretical understanding.

• Knowledge of Digital ECA: familiarity with Law No. 15,211/2025 and experience in monitoring ANPD regulations and guidelines.

• Experience evaluating the privacy implications of digital products, such as applications, platforms, or websites, ideally before their launch (privacy by design).

• Comprehensive experience in conducting DPIAs from start to finish.

• At least one certification completed: Privacy and Data Protection Foundation (PDPF) – EXIN; Privacy and Data Protection Practitioner (PDPP) or Certified Data Protection Officer – EXIN; CIPP/E, CIPM, or CIPT – IAPP; CIPP/US – IAPP; ISO/IEC 27701 Lead Implementer or Lead Auditor; PECB or an equivalent certification body.

• Postgraduate degree in digital law or data protection.

• Experience with a Digital ECA compliance project, whether completed or ongoing.

• Background in multi-client consulting.

• Experience in edtech, gaming, social media, or platforms and applications targeting children and adolescents, or dealing with student data.

• Familiarity with international child online protection frameworks, including the UK Age Appropriate Design Code, COPPA (United States), the Digital Services Act, and Article 8 of the GDPR.

• Understanding of age-assurance techniques and verifiable parental consent.

• Experience with privacy platforms, especially OneTrust, Privacy Tools, or Securiti.ai.

• Knowledge of AI governance, beneficial for recommendation and profiling systems in products aimed at minors.

• Proficient in English and intermediate Spanish.

• Preferred certifications: AIGP (Artificial Intelligence Governance Professional) – IAPP; official OneTrust certification – OneTrust.

🏝️ Benefits

• Meal voucher

• Wellhub

• Bradesco health insurance

• Equipment provided by the partner