Senior Legal Counsel GDPR, Privacy & Digitalisation (AI)

Heimstaden is a pan-European real estate investor, manager and operator. We manage around 155,000 homes across nine countries with a property value of around EUR 30bn. We acquire, develop, and manage properties, focusing on creating lasting value for shareholders, our tenants and the communities where our properties are located. 

Do you want to help shape how one of Europe's largest residential real estate companies uses data, AI and digital technology responsibly? 

Heimstaden Bostad is looking for an experienced Senior Legal Counsel to join our Legal team. You will advise on GDPR/data protection, AI, digitalisation and technology law, while helping build governance that enables innovation across nine European markets.  



The full-time position is based in Oslo and reports to Group Director Legal – Digitalisation and Privacy. 

As Senior Legal Counsel, you will provide strategic and practical legal support within GDPR/data protection, digitalisation, AI and technology-related matters. The role has a strong focus on supporting Heimstaden Bostad’s GDPR/data protection governance and compliance, and ensuring the lawful use of personal data across shared services, systems, business processes and data initiatives. 

Key responsibilities:  

• Advise the business on GDPR/data protection, AI, digitalisation and technology-related legal issues.   
• Support the continued development, implementation and monitoring of   Heimstaden Bostad’s Privacy Governance Framework.  
• Provide legal advice on a broad range of GDPR/data protection and privacy matters, including roles and responsibilities, lawful basis, transparency, data subject rights, retention and deletion, personal data breaches, supplier processing, intra-group data sharing and international data transfers.   
• Draft and maintain internal GDPR/data protection governing documentation, including employee training. 
• Conduct data protection impact assessments (DPIAs), risk assessments and transfer impact assessments (TIAs).  
• Advise on GDPR compliance and technology-related legal matters in relation to shared services, systems, applications, infrastructure and digital resources. 
• Review and structure data processing, data sharing and outsourcing arrangements. 
• Advise on AI Act implementation and other emerging digital regulations. 

We are looking for someone who:   

• Holds a master’s degree in law.  
• Has at least 5 years of relevant experience advising on GDPR, privacy/personvern and data protection law, gained from reputable law firm, an international company, or another complex organisation.  
• Has solid knowledge of the GDPR and practical experience applying privacy requirements in a business context.  
• Has an interest in AI regulation, digitalisation and emerging technology law.  
• Can translate complex legal requirements into practical, commercial advice.  
• Works in a structured and proactive way, with sound judgement and high professional integrity.  
• Builds trusted relationships across functions and seniority levels.  
• Communicates clearly and confidently in English, both verbally and in writing. 

We particularly value that you:   

• Are trustworthy, and demonstrates high personal integrity.  
• Thrive at the intersection of legal and commercial, with an eye for strategy and operations.  
• Can create structure and momentum in complex processes.  
• Balance attention to detail with a broader perspective.  
• Are motivated by anchoring an important function across the organisation.  
• Works well collaboratively as well as independently.  

What we can offer:    

• We offer a central role with broad responsibilities and significant exposure across the organisation. 
• You will have the opportunity to influence the further development of the governance and compliance area in a company with high ambitions, complex challenges, and an international outlook. 
• Collaborative and inclusive work environment that values innovation and excellence. 
• Competitive compensation and benefits package. 
  
   

Join Us  

We review applications and invite relevant candidates for interviews on an ongoing basis, and the position may be filled before the application deadline.

We conduct background checks as part of our recruitment process. If you have any questions regarding this, you are welcome to contact us!

At Heimstaden, we value diversity and believe that different perspectives create better decisions and a stronger work environment.