Position Description – Legal Counsel

The Office of the Information and Data Protection Commissioner (“IDPC”) is currently looking for a Legal Counsel ​(full-time) to join its team.

 About the IDPC

 The IDPC is the national supervisory authority responsible for monitoring the provisions of the General Data Protection Regulation and the Data Protection Act (Cap. 586 of the Laws of Malta), including the regulations made thereunder.

In addition, the IDPC is tasked with monitoring compliance with the provisions of Regulation (EU) 2024/1689 (the “AI Act”) insofar as matters relating to the protection of personal data and certain designated high-risk AI systems are concerned. The IDPC is also responsible for monitoring compliance with the Freedom of Information Act (Cap. 496 of the Laws of Malta) and the Re-Use of Public Sector Information Act (Cap. 546 of the Laws of Malta).

 Duties & Responsibilities

 Provide accurate and timely legal advice to the Information and Data Protection Commissioner on matters relating to legislation falling within the remit of the Office.

 Conduct or support investigations into potential infringements of data protection legislation notified to the Commissioner by controllers, including the assessment of factual and legal issues, and prepare draft legal analyses or any related documentation for the consideration of the Commissioner.

Conduct or support investigations into cross-border data protection complaints, including the assessment of factual and legal issues, and prepare draft legal analyses or any related documentation for the consideration of the Commissioner.

Respond to written and telephone queries concerning the interpretation and application of laws regulated by the IDPC, including requests for guidance and assistance submitted by data subjects and controllers in relation to their rights and obligations under the GDPR and other applicable legislation.

Represent and defend the IDPC in proceedings before the Information and Data Protection Appeals Tribunal, the Court of Appeal, and in any civil or other proceedings, as may be required, including the preparation of the relevant documentation.

 Actively participate in and take minutes of discussions at meetings and expert sub-groups fora, joint programmes, meetings and conferences held at a European and international level, particularly those of the European Data Protection Board (EDPB), the European Data Protection Supervisor, both in-person abroad and online.

Provide comprehensive and regular briefings to the Commissioner on the results and outcomes of discussions and decisions made during the EDPB expert sub-groups in preparation to the EDPB plenary.

Requirements

 Hold a law degree from the University of Malta (Doctor of Laws or Master of Advocacy – MQF Level 7), or a comparable qualification in accordance with the principles of mutual recognition of qualifications.

Demonstrate strong attention to detail and possess excellent written and verbal communication skills both Maltese and English, including the ability to draft clear, precise and well-reasoned legal documentation.

Proven experience of legal counsel for a minimum of two (2) Preference will be given to candidates who have previously held a role in the data protection field or served as a data protection officer and can demonstrate a detailed understanding of the data protection laws and principles. Holding a warrant to practice law in Malta will be considered an asset.

Ability to take ownership of projects and tasks and drive them to successful and timely completion, demonstrate the ability to learn quickly, and possess excellent communication skills together with a proactive approach towards identifying and implementing improvements to work processes. The selected candidate must be capable of working both independently and as part of a team.

Strong foundation in information security fundamentals plus excellent Microsoft skills including Word, Excel, PowerPoint.

Why join us:

• An inclusive workplace that promotes work–life balance through family‑friendly policies and with hybrid arrangements offered where applicable;
• A collaborative work environment supported by regular team‑building activities;
• Be part of an excellence-driven team offering professional growth and international exposure;
• A unique opportunity to make a significant impact and stand at the forefront of EU and international data protection affairs.

Interested candidates should send us an application letter together with their latest Curriculum Vitae on our functional mailbox [email protected].

Please visit this URL to access IDPC’s recruitment data protection notice.

Jobs Plus Permit No.: 475/2026