Privacy Principal Counsel

About the Company

At Agoda, we bridge the world through travel. Part of Booking Holdings [NASDAQ: BKNG], Agoda connects people to destinations and experiences through millions of hotels, holiday properties, flights and experiences worldwide. Data and technology are at the heart of our culture, fueling curiosity and innovation.

About the Role

Reporting to Agoda’s Chief Privacy Officer, the Principal Counsel, Privacy will provide senior programmatic and advisory support to the New B2B Business within Booking Holdings. You will work closely with colleagues across Booking Holdings Inc., Booking Holdings Financial Services, sister brands, and internal partners across FinTech, Product, Fraud, Legal, Internal Audit, People and Supply to launch and support the New B2B Business.

This position is based in Bangkok. Agoda provides relocation support for successful candidates not currently located in Bangkok. Remote or alternative base locations are not available.

Responsibilities

• Design, set up and implement the New B2B Business’s privacy program, including records of processing activities, drafting and implementing privacy policies and external notices, and privacy by design processes such as privacy impact assessments.
• Provide programmatic support for incident response, international data transfers (including data sharing), and data subject rights.
• Build data protection contractual templates and lead privacy-related contract negotiations for the New B2B Business.
• Provide practical privacy advice to product teams through early engagement and impact assessments, taking responsible risk positions to enable the business to move forward.
• Advise marketing teams on privacy considerations for marketing initiatives and cookie usage.
• Manage regulatory change and ensure compliance with new and existing global data protection laws relevant to the New B2B Business.
• Work with the Privacy Program team to facilitate program audits, controls and reporting obligations.
• Support regulatory enquiries, authority demand requests and escalations relating to data subject rights.
• Contribute to cross-brand initiatives, forums and networks across Booking Holdings when required.

Qualifications

• 8+ years of progressive experience in data privacy, preferably as a lawyer and/or in risk management.
• Relevant privacy certification such as CIPP/E, CIPP/US or CIPP/A.
• Demonstrable experience with global data privacy laws and regulatory frameworks.
• Hands-on experience designing and operationalizing privacy programs.
• Practical experience using privacy technology (e.g. OneTrust) to support core privacy program functions.
• Proven ability to influence and partner with senior stakeholders across Product, FinTech, Fraud, Legal, Internal Audit and Operations in fast-paced, high-growth environments.

Skills

• Regulatory compliance for data protection and privacy.
• Compliance program auditing and controls.
• Contract drafting and negotiation for data protection terms.
• Stakeholder management and cross-functional collaboration.
• Program and project management for privacy initiatives.