HOLYWATER TECH — is a technology company building entertainment products at the intersection of human creativity and artificial intelligence — AI-native platforms that reimagine storytelling and let anyone become a creator. Our ecosystem includes:
→ My Drama — a vertical series streaming platform, #1 among European and American companies in its niche
→ My Passion — the #1 digital book library in more than 10 countries
→ My Muse — a platform for AI-generated series, opening a new era of storytelling
HOLYWATER TECH today:
100M+ app downloads
strategic partnership with FOX Entertainment
2x annual growth across 2024–2025
30+ international awards, including Muse Creative, W3, Telly, Runway AI Film Festival, and Lovie
100M+ hours of content watched and read by users
leading positions in our niches across the US and European markets
We’re looking for a responsible and proactive Data Protection Officer. In this role you will build and maintain the company’s data protection and AI compliance program, working closely with engineering, analytics, marketing, and product teams.
HOLYWATER TECH’s businesses are growing fast, so we’re looking for someone who will become a reliable partner to our teams — helping embed privacy-by-design into how we build and ensuring compliance with data protection and AI rules across multiple jurisdictions.
We make decisions quickly and avoid unnecessary bureaucracy, so your ideas and output will have a direct impact on the company’s success.
What you’ll be doing
Building and maintaining privacy policies, internal procedures, the RoPA and an AI system inventory with AI vendor risk assessments
Running DPIAs and AI risk assessments for current and new products/features
Handling data subject requests, including chat history in AI features
Negotiating DPAs with vendors, partners and AI providers
Owning consent and marketing compliance across web, app, email and SMS
Owning age assurance and privacy safeguards for AI chat experiences: chat data, retention, training use, AI disclosure
Training employees, tracking regulatory change, and liaising with regulators and external counsel
What you need to join us
4+ years of legal experience, including 2+ years in a privacy/DPO role (law firm, Big 4 or in-house tech)
Experience conducting Data Protection Impact Assessments (DPIA) and building Records of Processing Activities (RoPA)
Deep knowledge of GDPR and CCPA/CPRA, and working knowledge of the EU AI Act
Hands-on experience with consent management: CMPs, Google Consent Mode, IAB TCF
Fluent English, including drafting legal and compliance documents
Ability to explain complex rules in plain language and work as a partner to product teams
Nice to have
CIPP/E, CIPM or equivalent
Kids and age assurance: COPPA, age-gating, app store age ratings
Marketing compliance: email/SMS consent, CAN-SPAM, TCPA, ePrivacy, Global Privacy Control
US/EU privacy litigation risk: pixels, session replay, VPPA, wiretapping claims
Vendor and transfer work: DPAs (including with LLM providers), SCCs, DPF, TIAs
AI products: conversational AI and AI companion features, AI-generated content, US state chatbot rules, AI vendor risks
What you’ll get from us:
Fast professional growth. We’re building an environment where development is the norm: lectures, libraries, hackathons, and schools. We cover professional training and learning any language, including Ukrainian.
Work format of your choice. Work from home, from our office in Kyiv’s Podil or in Lviv (generators, shelters, lunches, snacks — all inclusive), or from abroad — we have several offices there too.
Equipment and services. Everything you need to do your job.
Time off. 20 days of vacation + public holidays and unlimited sick leave.
Care for your body and mind. We cover sports, health insurance in Ukraine (after the probation period), corporate doctor services, and mental health support.
Why is it great to work with us?
Real impact. Your decisions affec
