Senior Managing Counsel, Head of Regulatory Data Releases

About Us

At Booking.com, data drives our decisions, technology is at our core, and innovation is everywhere. Our company is more than datasets, lines of code, or A/B tests; we represent the thrill of exploration and the memories made during travel. Through our products, partners, and people, we make it easier for everyone to experience the world.

The Role

The newly created Senior Managing Counsel, Head of Regulatory Data Releases position is a key role within Booking.com's Privacy function. This role involves leading and overseeing a team of legal professionals and operations specialists while building, implementing, and operationalising data disclosure and 'take-down' legal requirements. This is a unique opportunity to materially shape an operational function in the context of the world’s favorite pastime – travel.

As Booking.com expands its operations and digital ecosystem, a dedicated senior counsel is essential to efficiently manage all regulatory 'take down' and data disclosure requests in compliance with global data and consumer protection laws (including GDPR, EU Digital Services Act, EU e-Evidence Directive, and Short Term Rental regulations). This role will strengthen the company's capacity to respond quickly to enforcement requests, reduce compliance risks, and ensure strong data governance practices across various jurisdictions.

The successful candidate will have proven experience in:

• Data release subject matter expertise: Deep expertise in laws and regulations governing access requests for company data from government, regulatory, law enforcement, and other public bodies/individuals.
• Program development: Leading the development and implementation of data release processes, including risk management models, tooling, and reporting with a hands-on approach.
• Regulatory strategy and compliance: Creating and maintaining a consistent regulatory strategy for data release requests, ensuring compliance with multiple regulatory programs, and offering strategic/operational advice on established and emerging risks.
• Cross-functional collaboration: Effectively collaborating with various stakeholders and teams across the business, including legal SMEs across compliance, litigation, and product legal teams on data releases.
• Team leadership: Developing and managing a team of legal professionals and operations specialists located in different jurisdictions.
• Privacy and Regulatory expertise: Strategic engagement with relevant regulators, enforcement authorities, and auditors.

The highly-skilled lawyers of the Booking.com Legal and Public Affairs department advise the business and drive company objectives, maintaining independence in their professional practice.

Key Responsibilities

Program Development: Core Responsibilities

• Centralised Data Release Management: Design and implement a comprehensive function to centralise and optimise the legal and privacy aspects of various data release requests (e.g., law enforcement, data subjects, regulatory bodies, subpoenas), ensuring alignment with Booking.com’s business objectives and consumers’ privacy.
• Data Oversight and Protection: Oversee the processing, transfer, and release of data while safeguarding company interests. This includes ensuring legal validity and adherence of policies, procedures, and taxonomies by all internal stakeholders. A hands-on approach is crucial for designing and improving sustainable processes, workflows, problem-solving, and providing expertise.
• Strategic Governance and Implementation: Co-establish governance structures and workflows, overseeing the implementation of strategic, risk-based decision-making for data releases. This involves partnering with subject matter experts and senior stakeholders within Legal & Public Affairs to develop and deliver program components, balancing commercial sensitivities with brand reputation and risk minimization.
• Technological Integration and Automation: Drive the strategic adoption and integration of advanced tools and standardized workflows to ensure scalable, automated, and secure data release processes, enabling comprehensive analytics for proactive risk management and data-driven decision-making.
• Process Efficiency and Training: Develop efficient and consistent ways of working, providing guardrails, training, and ongoing education to all stakeholders.
• Compliance and Policy Maintenance: Maintain and update policies, procedures, and processes to ensure compliance with internal, legal, and regulatory standards.
• Impactful Communication and Training: Develop and execute impactful communication strategies, including comprehensive training to ensure adherence to data release processes across all relevant stakeholders.

Privacy and Regulatory Expertise

• Regulatory Data Releases Leadership: Act as the principal point of contact for departments handling inquiries from regulatory authorities, coordinating the company’s response consistently and sustainably. This requires strategic balancing of company interests, legal obligations, and high-risk regulatory compliance.
• Regulatory Engagement Strategy: In close liaison with other LPA leaders, develop and execute an engagement strategy with regulators and enforcement authorities that supports business needs and strategy.
• Regulatory Data Releases Expertise: Provide legal advice on privacy-related matters related to data releases and ensure compliance with relevant regulations and guidelines (e.g., European Data Protection Board). Stay abreast of relevant regulations and corporate enforcement trends.

Team Management

• Team Leadership: Lead and manage a team of legal counsels and legal operations within the Centre of Excellence. Drive team growth, development, and effectiveness by mentoring professionals, ensuring alignment with strategic priorities. This includes frequent travel to the Centre of Excellence.
• Operations Management: Oversee a team of legal operations to ensure consistent and sustainable assessment and delivery of results.
• Planning and Resource Management: Proactively manage resources for efficiency by anticipating future peak workloads and team member availability.
• Reporting: Responsible for reporting on all Data Releases activities to senior management, identifying trends, anticipating new regulations, and business risks.

Qualification & Skills

• Law degree
• 8 - 15 years post qualification experience in a global large-scale corporate international environment in a legal role involving privacy and/or regulatory compliance
• Active admission to practice law in at least one relevant jurisdiction
• Experience leading a privacy data release program or a similar regulatory area strongly preferred
• Experience with direct or principal engagement with regulators, enforcement authorities, or other supervising authorities
• Experience designing, building, and running risk management programs, including governance framework and reporting mechanisms
• Knowledge and experience in conducting and applying risk assessments
• Great team player
• Demonstrated excellent managerial experience, strong leadership, and advanced coaching skills
• Adaptable: Openness to new ideas, quick-read for changing situations, balances long-term view with short-term actions.
• Proactive, able to quickly respond to issues, prioritize effectively, entrepreneurial.
• Exceptional communication skills (verbal, written, listening) to effectively engage, influence, and advise internal and external stakeholders.

Deadline for applications is 3 December 2025

Further Traits Look For

• Alignment with Booking.com’s values (Customer First, Succeed Together, Own It, Learn Forever, Do the Right Thing).
• Curiosity, flexibility, and a creative, pragmatic approach to problem-solving.
• Confidence with collaboration.
• Ability to influence stakeholders at all levels.
• Proactivity, resilience, and a drive to deliver results.
• Strong judgment with attention to both the big picture and key details.
• Courage to take a stance and make tough decisions.
• Team-oriented, self-aware, and a good listener.
• Agility in prioritizing and meeting deadlines.
• Forward-thinking, with a focus on emerging legal and policy issues.

Why Join the Legal & Public Affairs Team Now?

This is a pivotal moment in e-commerce and travel, and joining Booking.com’s Legal & Public Affairs (LPA) team provides opportunities to shape the future. The LPA team plays a key role in enabling Booking.com to become a one-stop solution for all travel-related needs, driving ethical, sustainable growth.

Who We Are?

We are an award-winning team of around 200 professionals from 36+ nationalities, recognised by Legal 500 GC Powerlist, Assoc. of Corp Counsel, Global Competition Review, and others. We encourage active participation in the industry and engage with stakeholders on policy issues impacting travel and tech innovation.

As a team, we believe in:

• Being integral to decision-making, shaping Booking.com’s future.
• Supporting Booking's mission to make travel accessible.
• Offering opportunities for team members to explore new areas or specialize.
• Providing holistic, integrated legal and public affairs advice.
• Continuously improving Legal Operations, innovating, and sharing best practices.
• Learning from mistakes and embracing growth.
• Working collaboratively with a sense of humor and enjoying the journey together!

Benefits & Perks - Global Impact, Personal Relevance

Booking.com’s Total Rewards Philosophy offers competitive compensation and benefits, plus unique-to-Booking.com benefits, including:

• Annual paid time off and generous paid leave schemes.
• Hybrid working including flexible arrangements and up to 20 days per year working from abroad.
• Industry-leading product discounts, including automatic Genius Level 3 status.

Inclusion at Booking.com

Inclusion has been a core part of our company culture since day one, reflected in our diverse employee base. We ensure colleagues with disabilities are provided the necessary adjustments and tools.

Application Process

Let’s go places together: How we Hire. Detailed instructions on post-application requirements including any required application materials, deadlines, portfolios, coding challenges, or other assessments as defined by BU or department.

Booking.com is proud to be an equal opportunity workplace and is an affirmative action employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, gender, gender identity or expression, sexual orientation, national origin, genetics, disability, age, or veteran status. We strive to create an environment that allows everyone to thrive.

Pre-Employment Screening: If your application is successful, your personal data may be used for a pre-employment screening check by a third party as permitted by applicable law.

Key skills/competency

• Data release expertise
• Regulatory compliance
• Data governance
• Team leadership
• Cross-functional collaboration
• Privacy law
• Risk management
• Process optimization
• Strategic engagement
• Legal counsel