Senior Associate Data Privacy & GDPR (m/w/d)
Position Overview
Job Description
CMS Germany is looking for a Senior Associate to join our Data Privacy and Digital Regulation team in Berlin. You will advise technology companies, healthcare providers, and industrial clients on GDPR compliance, international data transfers, and emerging digital regulation including the AI Act and Digital Services Act.
Responsibilities
- Advise on GDPR compliance including data protection impact assessments and records of processing activities
- Draft and negotiate data processing agreements, standard contractual clauses, and binding corporate rules
- Advise on international data transfer mechanisms post-Schrems II
- Support clients with data breach notifications to supervisory authorities
- Advise on the interplay of GDPR with sector-specific regulation (e-Privacy, telecoms, health data)
- Provide guidance on AI Act compliance and algorithmic decision-making
- Represent clients before German data protection authorities (Datenschutzbehoerden)
Requirements
- Zweites Staatsexamen with minimum 7.5 points
- 4-7 years of experience in data privacy law
- Admitted as Rechtsanwalt at a German Rechtsanwaltskammer
- In-depth knowledge of GDPR, BDSG, TTDSG, and EU digital regulation
- CIPP/E or equivalent data privacy certification preferred
- Technical understanding of data processing and IT systems
- Fluent in German and English
Responsibilities
CMS Germany is looking for a Senior Associate to join our Data Privacy and Digital Regulation team in Berlin. You will advise technology companies, healthcare providers, and industrial clients on GDPR compliance, international data transfers, and emerging digital regulation including the AI Act and Digital Services Act.
Responsibilities
- Advise on GDPR compliance including data protection impact assessments and records of processing activities
- Draft and negotiate data processing agreements, standard contractual clauses, and binding corporate rules
- Advise on international data transfer mechanisms post-Schrems II
- Support clients with data breach notifications to supervisory authorities
- Advise on the interplay of GDPR with sector-specific regulation (e-Privacy, telecoms, health data)
- Provide guidance on AI Act compliance and algorithmic decision-making
- Represent clients before German data protection authorities (Datenschutzbehoerden)
Requirements
- Zweites Staatsexamen with minimum 7.5 points
- 4-7 years of experience in data privacy law
- Admitted as Rechtsanwalt at a German Rechtsanwaltskammer
- In-depth knowledge of GDPR, BDSG, TTDSG, and EU digital regulation
- CIPP/E or equivalent data privacy certification preferred
- Technical understanding of data processing and IT systems
- Fluent in German and English
Requirements
Perks & Benefits
Compensation
€9,000 - €13,000/month
Practice Area
Privacy & Data Protection (GDPR)
Position
Senior
Education Requirements
Professional degree
Experience Requirements
5 to 7 years
Applicant Location Requirements
Applicants must be located in: US
Application Contact
Contact: CMS Germany Hiring Team
Application Deadline
June 18, 2026
Employment Type
Full time