Legal & Compliance

Legal Counsel & DPO (Remote)

Preferable Location(s): Lisbon, Portugal | Porto, Portugal
Work Type: Full Time

What’s Promptly in a nutshell

Promptly is building the first patient-centered global evidence network, offering real world data sharing and monetization capabilities. Together with a selected network of Partners, we generate new knowledge from harmonized datasets, augmented with the collection of longitudinal patient-reported data and patient-generated digital biomarkers within a secure and privacy-preserving environment. We deliver valuable insights to leading health systems, payers and life-science companies across multiple therapeutic areas, including cardiometabolic, oncology, and immunology. Operating in 10 countries, we promote better healthcare at lower costs for thousands of new patients every day through the use of Real World Evidence.  

We answer the question – is this patient treatment the best it could possibly be?

What drives us

We exist to empower every patient and every health organization on the planet with evidence on the outcomes of care!

Why do we get up in the morning? Well, most healthcare professionals have chosen to work in healthcare driven by their desire to make a difference in patients’ lives. And so have we! We have chosen to follow this calling by addressing the biggest problem in healthcare: the lack of real-world evidence on the outcomes of care.

For us, society denying patients better care due to lack of access to data is unethical, in a world where technology improved so many aspects of our world. Making the right evidence available to healthcare organizations to help prevent one lost life, one care complication, one failed treatment is the moral obligation that big tech companies have – it’s our Hippocratic Oath.

At Promptly, everything we do is driven by our core purpose: to promote better healthcare at lower costs for patients every day, by making health outcomes available.

The Context

We are scaling fast and (certainly not) breaking things, backed by renowned VC investors. Promptly's rapid expansion, scalability and efficient growth, over the next 24 months, must rely on an agile legal workflow. For this we are currently seeking a Legal Counsel & DPO. That’s where you will come in. You will be a strategic partner to the leadership team, ensuring the company operates in compliance with applicable laws and regulations. You will report directly to the CFO and work closely with the leadership team.  

What you’ll be expected to do

You will be responsible for overseeing all legal aspects of the company, including Data Privacy and Protection (acting as well as Promptly’s DPO), Regulatory Compliance, Contract Management, Intellectual Property and Corporate Governance, while also managing outside counsel (on a need to basis).  

Key Responsibilities

Data Privacy and Protection:

  • Develop and implement a comprehensive data privacy policy, including compliance with GDPR and other relevant regulations
  • Draft and negotiate data use agreements / data processing agreements with partners, clients and vendors 
  • Oversee data security practices 
  • Manage data breach response protocols 
  • Oversee the company’s privacy policies and compliance with data protection regulations 
  • Conduct, support, revise and adapt Data Protection Impact Assessments (DPIAs), and provide advice regarding DPIAs 
  • Maintain and update company’s record of processing activities 
  • Provide internal training on the matter 

Regulatory Compliance:

  • Stay up-to-date on evolving laws and regulations regarding health data and advise the company on compliance strategies 
  • Liaise with regulatory agencies as needed 
  • Provide internal training on the matter 

Risk Management: 

  • Identify and assess legal risks associated with the company's business activities 
  • Develop and implement strategies to mitigate legal risks 
  • Develop and implement legal policies, processes, and best practices to mitigate legal risks and ensure compliance with applicable laws and regulations, especially in the areas of health data, privacy, and security 
  • Identify and mitigate legal risks associated with operational decisions 

Contract Management:

  • Legal stack 
  • Oversee the CSM 
  • Develop and support the negotiation a variety of contracts, including customer agreements, vendor agreements, and employment agreements 
  • Negotiate, draft, review, and execute contracts and agreements with customers, partners, vendors, investors and financial institutions, ensuring that they protect the company's interests and align with its strategic goals 
  • Support, from a legal perspective, draft of proposals for funded projects and other tenders 
  • Manage the contract lifecycle from negotiation to execution 

Intellectual Property Rights:

  • Advise and support the company on intellectual property matters, including patent, trademark, and copyright protection, licensing, and enforcement 

Corporate Governance:

  • Advise the Board on corporate legal matters 
  • Oversee legal aspects of BoD/ SM meetings 
  • Draft and maintain corporate governance documents 
  • Act as Corporate Secretary 

Strategic Business Guidance:

  • Monitor and anticipate changes in the legal landscape and industry trends that may affect the company's business and operations, and advise on the appropriate actions and strategies to adapt and respond 

External Legal Liaise:

  • Build and maintain strong relationships with relevant external parties, such as regulators, authorities, industry associations, and legal peers, and represent the company's interests and views in various forums and events 
  • Manage external legal relationships and outside counsel

Qualifications and work experience

  • LL.M. from a reference law school
  • Minimum of 10 years of experience in a reputable law firm or as a corporate legal counsel, with a focus on regulatory compliance (especially in data privacy), corporate law, contracts and intellectual property  
  • Excellent written and verbal communication skills, particularly in English, is absolutely mandatory  
  • Highly valued
    • Previous professional experience in healthcare  
    • Former DPO  
    • Experience in providing legal advice to startups or tech companies is highly preferred

Personality and behavioral traits

You possess strong analytical and legal skills and are not afraid to demonstrate these abilities in complex legal scenarios. You are bright, articulate, and passionate about being part of a nascent and mission-driven project in health data. You have the ability to lead and the flexibility to manage differences of opinion within the team. You are a good communicator, excellent at establishing contacts and building relationships, and have a high level of attention to detail and organizational skills. You privilege an analytical approach and have the ability to identify the strategic and business dimensions of legal issues. You are ambitious, enjoy taking ownership, and are constantly working to improve your skills. You are not afraid to constructively challenge. You can work independently, manage multiple tasks simultaneously, and effectively collaborate with diverse teams. You are willing to hustle to get things done in a fast-paced environment.  


  • Full time
  • Based in Portugal 
  • Promptly is a remote-first company. However, if you want to, you can still work from available office spaces in Oporto and Lisbon, Portugal  

What we offer

  • Ownership, defining your own career pathway
  • A unique growth opportunity, being one of the firsts on a fast-growing team that will make healthcare better and have a significant impact in people’s lives
  • Fantastic working environment, with a young and enthusiastic, and talented 40+ team coming from highly reputed players from Healthcare to Unicorn Startups, and leading Multinational
  • Financial benefits
    • Competitive salary
    • Annual bonus
    • Equity compensation via our ESOP (open to ALL team members of our team)
    • Annual allowance for training
    • Private health insurance
    • Allowance for home-office equipment
  • Non-financial benefits
    • Equal opportunity and inclusive environment
    • Flexible work schedule
    • Flexible vacation policy
    • Corporate events (all-hands; retreats; ...)

What is the recruiting process like

  • There is a first interview with your future manager and/ or seasoned team members to get to know you and to give you an overview of Promptly and of the job you are applying to
  • Afterwards, you will undergo a technical assessment stage in which you will work on a test task or solve a business case. Depending on the position, it might be sent before the interview
  • In same exceptional cases, a third interview might take place. Don’t worry if this happens. It’s because we have a good opinion on you, but there might be something we still need to get clear
  • Finally, you will get your offer and hopefully you’ll accept it!

Our Culture & Values

If there is 1 rule at Promptly, this is the one – before making any judgement, put yourself in the shoes of another.
Empathy is the courage to choose to actively understand what the experience of another person could have felt like, without necessarily have experienced it ourselves.
Empathy is not a one-day journey, it is a mindset that must be continuously developed – it is an everyday choice to fight for kindness and, by doing so, to help change people, organizations, and society for the better.
If you embrace this mindset, you are a true leader @ Promptly, you are a true leader in our society.

At Promptly, we don’t foster fixed hierarchies or top-down decision making. If you want to hit the ground running in our team, do not wait for someone to “tell you what to do”. 
Acting like an owner means that you should align with our core purpose and find the best way to deliver on it, every day. 
Starting a new project, analyzing new data, reaching out to a new client, there is no area of the company you cannot have an impact in, because there is no such thing as “someone else’s problem”.

Working to improve healthcare is a great responsibility and what inspires us to not settle for less. 
You have the responsibility to be a leader within our company. A leader is not a title. A leader is someone who delivers on our core purpose and inspires others to follow our cultural values. It is a “great power, and a great responsibility”. 
Leadership comes with the awareness of one’s own strengths and weaknesses and the responsibility to use these to deliver on what you promised. It comes with the responsibility to understand the context, ask for help when needed (teamwork), and be accountable for the quality of what we produce (excellence).

Our team is our greatest asset, and we are fortunate to attract great people. We go the extra mile to find the best person for every role – making our team diverse in backgrounds, personal experiences, skills and knowledge.
If you are not contributing – or worse, actively destroying – teamwork, you are derailing us from our core purpose and ultimately hurting patient care.

At Promptly, we’re recognized by society as thought leaders, contributing to research and evidence generation through technology and data science. 
We put on ourselves a very high pressure to keep delivering on this role to our customers, patients and society.
Excelling at our work is a continuous process of improvement, it is not an end state. We're committed to continuous learning and self-development. so, if you have just finalized delivering a great work, rest, enjoy and go improve your work further.


For more info or submitting your Job Application, reach out at [email protected] 

If you don’t match 100% of the requirements, but you consider that you have a good fit for the job, we think you should apply anyway. We are seeking for talented people, motivated, and with potential to grow, and will work with you to adapt the role or find another in which you might fit.

Data Privacy
Your personal data will be processed for the purposes of managing Promptly’s recruitment related activities which includes setting up and conducting interviews and tests for applicants, assess and review such candidates and similar activities needed in the recruitment and hiring process. Your personal data will be shared with Proef, a provider engaged by Promptly to help us manage our recruitment and hiring process. For more information about how Promptly processes personal data and information about your rights etc., please see Promptly’s/ Proef’s Privacy Policy (link to: Policy for management of application (
By submitting your application, you consent to Promptly/ Proef processing your personal data for recruitment purposes and to store such personal data for up to 12 months, unless we receive a request of erasure of the data from you to [email protected], in case Promptly would like to contact you regarding future job openings.

Submit Your Application

You have successfully applied
  • You have errors in applying