Digital ECA and Privacy Consultant – Mid-Level/Senior

Job not on LinkedIn

🔥 17 minutes ago

🇧🇷 Brazil – Remote

⏰ Full Time

🟠 Senior

💼 Consultant

👻 Ghost score 15%

What it means: the chance that no one is really hiring for this job.How to read it: 60% or higher means we think this is a ghost. Lower scores are less of a worry.How we score it: age, reposts, open roles vs team size, how fast jobs close, and whether pay is listed.Fine print: an estimate from public data, not a judgment of the company. Real jobs can score high, so treat it as a hint, not a fact.

Apply Now

Find Similar Remote Jobs

Gaia

WebsiteLinkedInAll Job Openings

1 - 10 employees

Founded 2024

💼 Consulting

🏥 Healthcare

📣 Marketing

Consulting • Healthcare • Marketing

Gaia is a human-resources consultancy and partner for small and medium-sized companies, offering practical and strategic HR services focused on people-first growth. The firm provides HR consulting, HR as a Service (HRaaS), talent attraction and recruitment, mentoring and coaching for leaders, and customized training and development programs. Led by experienced HR executives with over 25 years in the field, Gaia emphasizes aligning HR strategy with company culture, delivering tailored, budget-aware solutions to help organizations scale and improve people processes.

📋 Description

• Lead the analysis of the Digital ECA’s applicability by product and feature, providing the legal basis for the client’s decisions. • Structure and maintain an inventory of digital products, features, and third parties subject to the law. • Lead Digital ECA-specific DPIAs, identifying and classifying risks and defining controls and evidence. • Prepare the periodic DPIA reassessment cycle and the report required under Article 31 of the law. • Advise on age-assurance and parental-consent mechanisms, comparing alternatives and risks with product and technology teams. • Advise on advertising, trackers, and cookie requirements applicable to children and adolescents across web and mobile environments. • Structure reporting, appeals, and rights-request channels, including workflows, deadlines, and responsible parties. • Support third-party assessments and the handling of serious violations and incidents, including feature restriction or suspension. • Maintain an evidence dossier to respond to requests from the ANPD. • Conduct workshops, meetings, and training sessions with legal, product, technology, and marketing teams. • Monitor ANPD laws, decrees, guidelines, and public consultations and update the framework accordingly. • Translate requirements for technical teams and configure controls, attributes, questionnaires, rules, and forms in OneTrust. • Keep the DPO informed about progress, risks, and interfaces with the privacy program. • Work on Digital ECA and privacy projects across the client portfolio and support technical proposals. • Document status, decisions, and outstanding items by email and keep the management board up to date.

🎯 Requirements

• Bachelor’s degree in Law. • Experience in privacy and data protection, working in a consultative capacity at a privacy law firm or in an in-house legal department. • Practical knowledge of Brazil’s LGPD: strong command of processing children’s and adolescents’ data (Article 14), DPIAs, and legal bases, with hands-on application rather than theoretical knowledge alone. • Digital ECA: knowledge of Law No. 15,211/2025 and experience monitoring ANPD regulations and guidelines. • Digital products: experience assessing the privacy of applications, platforms, or websites, preferably before launch (privacy by design). • Impact assessments: end-to-end experience conducting a DPIA. • At least one completed certification: Privacy and Data Protection Foundation (PDPF) – EXIN; Privacy and Data Protection Practitioner (PDPP) or Certified Data Protection Officer – EXIN; CIPP/E, CIPM, or CIPT – IAPP; CIPP/US – IAPP; ISO/IEC 27701 Lead Implementer or Lead Auditor; PECB or equivalent certification body. • Postgraduate qualification in digital law or data protection. • Experience working on a Digital ECA compliance project, either completed or in progress. • Experience in multi-client consulting. • Experience in edtech, gaming, social media, or platforms and applications aimed at children and adolescents, or involving student data. • Knowledge of international child online protection frameworks: the UK Age Appropriate Design Code, COPPA (United States), the Digital Services Act, and Article 8 of the GDPR. • Knowledge of age-assurance methods and verifiable parental consent. • Experience with privacy platforms, particularly OneTrust, Privacy Tools, or Securiti.ai. • Familiarity with AI governance, which is useful for recommendation and profiling systems in products for minors. • Advanced English and intermediate Spanish. • Desirable certifications: AIGP (Artificial Intelligence Governance Professional) – IAPP; official OneTrust certification – OneTrust.

🏖️ Benefits

• Meal voucher • Wellhub • Bradesco health insurance • Equipment provided by the partner

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Upload Resume