Legal Counsel – Data Protection & Privacy (Brussels)

Legal Counsel – Data Protection & Privacy

BNP Paribas Fortis on the Warandeberg in Brussels is seeking a Legal Counsel specializing in data protection and privacy law. With the Belgian Data Protection Authority (APD/GBA) headquartered in Brussels and the GDPR enforcement landscape rapidly evolving, this role sits at the forefront of EU privacy law compliance in the financial sector.

What You Will Do

• Advise business units on GDPR compliance for banking, insurance, and investment services
• Conduct Data Protection Impact Assessments (DPIAs) for new digital banking products
• Manage data subject access requests and data breach notification procedures
• Advise on cross-border data transfers including adequacy decisions and SCCs
• Liaise with the Belgian Data Protection Authority (APD/GBA) on inquiries and complaints

• Provide day-to-day GDPR advisory to business and IT teams
• Manage DPIA processes and data protection compliance programmes
• Handle data breach notification and response procedures
• Draft and review data processing agreements and privacy policies
• Monitor Belgian and EU data protection regulatory developments

• Master in Law from a Belgian or European university
• 3-5 years of experience in data protection/privacy law, preferably in financial services
• CIPP/E or equivalent privacy certification is an advantage
• Deep knowledge of GDPR, ePrivacy Directive, and Belgian Data Protection Law
• Fluent in French and English; Dutch is a strong advantage
• Experience with DPIAs, breach management, and regulatory interactions