Legal Assistant Providing Operational Support in Data Protection and AI - European Committee of the Regions (FGIII, Brussels)

About this position

The summary below is published by European Committee of the Regions on the official vacancy notice. Our own analysis — salary realism, comparable openings, career trajectory, language profile — follows further down the page.

Key responsibilities

According to the vacancy notice, the role centres on the following duties:

• Provide legal, drafting, technical and operational support for application of Regulation (EU) 2018/1725 across CoR directorates and services
• Support the Data Protection Officer and work under supervision of officials or temporary staff
• Prepare first drafts and perform completeness and consistency checks of data-protection notices and records of processing activities
• Update relevant registers and gather information from delegated controllers
• Contribute to data-protection impact assessments
• Assist with handling and documentation of personal-data breaches, data-subject requests, contracts and procurement files
• Support international data transfers, complaints, investigations and consultations involving the Data Protection Officer
• Carry out legal research and prepare initial analyses concerning roles and responsibilities of controllers, joint controllers and processors

Are you eligible?

Check these requirements from the notice before investing time in an application:

• Education: Completed post-secondary education attested by a diploma, preferably in law, public administration, information governance or another field relevant to the duties; or secondary education attested by a diploma giving access to post-secondary education, followed by at least three years of appropriate professional experience
• Experience: Relevant experience in legal, technical or administrative support relating to data-protection compliance, preferably involving Regulation (EU) 2018/1725. Experience supporting assessments concerning AI systems, information-security measures or cybersecurity incidents is an asset.
• Languages: One official language of the European U… (C1), Another official language of the Europe… (B2), English (C1), French (B2)
• Key skills: Think critically, analyse and solve problems pragmatically, Assess credibility and reliability of sources, data and information, Use relevant digital tools to carry out duties, Organise own work and demonstrate responsibility, Identify priorities and make appropriate decisions, Adapt to evolving working environment, Take initiative and work autonomously, Learn and develop professionally, Work collaboratively in constructive way, Convey information clearly and concisely orally and in writing
• Eligibility: Must have passed EPSO CAST FGIII. Must meet eligibility criteria specified in art. 82(3) of the Conditions of Employment of Other Servants.

Selection process

The notice describes the following selection steps:

• Online application form

Contract and working arrangements

Contract duration: 2 years starting from 1/1/2027.

Hiring unit: Legal Affairs Unit.

Position details

Reference

COR/CA/FGIII/34/26

Last Verified

12 November 2026

Position overview

This is the official EU Careers listing for Legal Assistant Providing Operational Support in Data Protection and AI at European Committee of the Regions based in Brussels at the FGIII grade level (Other). The vacancy reference is COR/CA/FGIII/34/26.

Contract staff member - Assistant

Deadline

26 November 2026

Detail of the vacancy notice

- Directorate:N/A - Management:no - Unit/Service: Legal Affairs Unit​​​​ - Grade:Contract staff member FGIII - Location:Brussels - Duration of the contract: 2 years starting from 1/1/2027 - How to apply: Online application form")

Your job and responsibilities

Interested in EU data-protection law and the protection of individuals in an evolving digital environment? Would you like to provide practical support helping the CoR comply with its data-protection obligations and integrate data-protection requirements into AI, cybersecurity and digital initiatives?

As a legal assistant specialising in data protection and AI in the Legal Service, supporting the Data Protection Officer and working under the supervision of officials or temporary staff, you provide legal, drafting, technical and operational support for the application of Regulation (EU) 2018/1725 across CoR directorates and services, including where personal-data processing involves AI systems, information-security measures, cybersecurity incidents or emerging technologies.

You support the organisation, assessment and administrative follow-up of data-protection files. In particular, you prepare first drafts and perform completeness and consistency checks of data-protection notices and records of processing activities, update the relevant registers, gather information from delegated controllers and contribute to data-protection impact assessments. You also assist with the handling and documentation of personal-data breaches, data-subject requests, contracts and procurement files, international data transfers, complaints, investigations and consultations involving the Data Protection Officer.

You carry out legal research and prepare initial analyses concerning the respective roles and responsibilities of controllers, joint controllers and processors, and contribute to drafting or reviewing contractual clauses, arrangements and accountability documents. Under supervision, you also support assessments of AI systems, information-security measures and cybersecurity incidents from a data-protection perspective, including lawfulness, purpose limitation, data minimisation, transparency, data-subject rights, security of processing, accountability, privacy by design and by default, human oversight, risk assessment and safeguards for international transfers. You contribute to awareness-raising activities and to practical cooperation with the EDPS and interinstitutional partners.

You join the CoR Legal Service (Legal Affairs Unit), a small, dynamic and motivated team consisting mainly of lawyers specialising in various fields of EU law. The unit includes the Data Protection Officer and Deputy Data Protection Officer and reports directly to the Secretary-General.

Are you the talent we are looking for?

GENERAL ABILITIES AND CAPACITIES REQUIRED

- Think critically, analyse and solve problems pragmatically. - Assess the credibility and reliability of sources, data and information, and use the relevant digital tools to carry out your duties. - Organise your own work, demonstrate responsibility, identify priorities, make appropriate decisions and deliver results. - Adapt to an evolving working environment, demonstrate commitment and adopt a constructive attitude at all times. Remain effective and flexible even during periods of heavy workload. - Take initiative to achieve individual and shared objectives, demonstrate ownership and work autonomously. - Learn and develop professionally to continuously enhance job performance, your knowledge of the organisation and the working environment. - Work together with others in a constructive way, by contributing to diverse and inclusive working environment. Act with respect and courtesy at all times. - Convey information and relevant opinions clearly and concisely both orally and in writing, facilitate interaction and engage effectively with others. Treat confidential or sensitive information accordingly.

JOB-SPECIFIC REQUIREMENTS

- You have passed EPSO CAST FGIII"). - You have relevant experience in legal, technical or administrative support relating to data-protection compliance, preferably involving Regulation (EU) 2018/1725. This may include preparing or checking data-protection notices and records of processing activities, maintaining registers, collecting information for data-protection impact assessments, supporting the handling of personal-data breaches or data-subject requests, checking contractual data-protection clauses, documenting international data transfers or preparing files for review by a data-protection officer or supervisory authority. Experience supporting assessments concerning AI systems, information-security measures or cybersecurity incidents is an asset. - You have good legal research, drafting and file-management skills, attention to detail and the ability to coordinate contributions, follow established procedures, manage several files and translate data-protection requirements into clear draft documents, checklists and practical support materials for validation by the responsible official or temporary staff member. - You have a thorough knowledge of one of the official languages of the European Union and a satisfactory knowledge of another of the EU official languages. For functional reasons, a high level of English is required and a good level of French is desirable. - You have a good command of IT applications and tools, such as Outlook, Excel, Word and SharePoint, including AI tools in a secure environment. - You are interested in EU data-protection law, fundamental rights and emerging technologies, and you work effectively with legal and operational colleagues while following guidance, procedures and deadlines. - You have a level of education corresponding to completed post-secondary education attested by a diploma, preferably in law, public administration, information governance or another field relevant to the duties; or a level of secondary education attested by a diploma giving access to post-secondary education, followed by at least three years of appropriate professional experience. Familiarity with the principles of lawfulness, purpose limitation, transparency, data minimisation, security, accountability and data protection by design and by default is required. Knowledge of the EU AI Act, cybersecurity rules or information-security governance from a data-protection perspective is an asset.

Please note that candidates must meet the eligibility criteria specified in art. 82(3) of the Conditions of Employment of Other Servants")

Salary at this grade

Basic monthly salary at FGIII runs from €3,476 (step 1) to €3,932 (top step), giving an annual range of roughly €41,712 to €47,184 before tax and allowances. Steps increase automatically every two years; the figures here are taken from the salary grid in the EU Staff Regulations.

Eligible staff posted away from their country of nationality also receive an expatriation allowance worth 16% of basic salary (around €556 per month at step 1 of FGIII) together with household, dependent-child, and education allowances where applicable. Take-home pay is then adjusted by the country correction coefficient for Brussels. For a worked example see our correction coefficients guide and the EU salaries overview.

Application timeline

This vacancy was first listed on 12 November 2026, today.

The application deadline is 26 November 2026, 12 days from today. Late applications are not accepted, so submit through the official EU Careers portal well in advance.

Last verified against the EU Careers feed on 12 November 2026.

Where to learn more

For full responsibilities, requirements, and career progression at FGIII see our FGIII grade page; for headcount, mission, and other open vacancies at European Committee of the Regions see the European Committee of the Regions institution page; for the cost of living, correction coefficient, and other postings in Brussels see our Brussels location page.

New to EU careers? Our beginner's guide walks through entry routes, EPSO competitions, and what to prepare. For application logistics see application tips and EPSO competitions.