Compliance Counsel

A decade of building – and we’re still accelerating.
Flo is the world’s #1 health & fitness app worldwide on a mission to build a better future for female health. Now, we’re building the next generation of digital health – AI-powered, privacy-first, clinically backed – to help our users know their body better.
Flo’s Legal and Compliance team are partners across the whole business here at Flo. Flo’s privacy programme, compliance with regulatory obligations, contract management, IP enforcement… you name it.
The team’s divided into four groups - Privacy & Data Protection, Regulatory, Compliance, and Legal Services, each managing its own area.
This role’s all about delivering Flo’s continued commitment to data privacy by design. It’s a Privacy Counsel position reporting to our VP of Privacy, sitting as part of a team of six and doing some really exciting work.
and with the successful launch of Anonymous mode (making it open source), we’re exploring the future of privacy in AI, as well as enhancing DSARs, reviewing our privacy policies and systems, and helping to ensure privacy by design and as default across our multi-national business.
Qualified solicitor in the UK (usually 0-2 years’ PQE) in a privacy and data protection focused Counsel position
Proven track of work in a tech company, software focused product company or reputable law firm
Knowledge of data protection laws globally (including the USA)
Knowledge of risk management
Knowledge of agile methodologies
Proven track of work in a health tech, digital health or digital wellness company
Providing privacy and data protection advice to the business on a variety of matters
Giving guidance to ensure data protection is baked into the design, build, test and deployment stages across activities and departments
Carrying out Data Protection Impact Assessments (DPIAs), and providing solutions to mitigate privacy risks, and managing privacy risks Assisting with the delivery of staff training and Privacy Champion Network communications on privacy best practice to all entities and affiliates (with a particular focus on digital data uses)
Undertaking legal research on emerging privacy and data protection laws and guidance, and horizon scanning for regulatory updates.
Supporting our technology and information security teams on cybersecurity implementation and data privacy.
Working to ensure that data protection and best practices are fully integrated into Flo’s compliance framework
Adopting a curious approach to privacy-enhancing technologies and helping to set up new tooling from a privacy perspective.
Successfully providing pragmatic business-oriented and compliant privacy solutions to the company on various topics such as: product and feature development, consent management, privacy assessments, digital marketing and user rights.
We care about craft, ship with purpose, and always raise the bar.
Competitive salary and annual reviews
~ Opportunity to participate in Flo’s performance incentive scheme
~ Paid holiday, sick leave, and female health leave
~ Enhanced parental leave and pay for maternity, paternity, same-sex and adoptive parents
~ Accelerated professional growth through world-changing work and learning support
~ Flexible office + home working, up to 2 months a year working abroad
~5-week fully paid sabbatical at 5-year Floversary
~ Flo Premium for friends & family, plus more health, pension and wellbeing perks

Diversity, equity and inclusion
We’re proud to be an equal opportunity employer, and we welcome applicants from all backgrounds, communities and identities.