In-house Data Privacy Lawyer - Part time 4 days p/w - East Mids

An established international goods & services business is looking for an experienced GDPR / Data Protection Lawyer to join its UK & Ireland Legal & Compliance team.


This is a high-autonomy role, reporting to the Head of Legal / DPO, with responsibility for acting as the trusted legal adviser on UK & Ireland data protection law. The business has a well-established GDPR framework, so the opportunity is to own, evolve and improve the function as the business, technology and regulatory landscape develops.


The role


You will provide practical, commercially focused advice across the business, with responsibility for:


· Advising on UK data protection / GDPR matters and ensuring compliance with legal, regulatory and internal requirements.
· Managing DSARs with the support of a paralegal.
· Maintaining and developing the UK Record of Processing Activities (ROPA).
· Overseeing DPIAs / Privacy Impact Assessments and Legitimate Interest Assessments.
· Creating, updating and maintaining privacy notices.
· Advising on international data transfers.
· Acting as the primary legal contact with the ICO.
· Advising on the data protection implications of new systems, technologies, products and business initiatives, including AI.
· Sitting on the AI Committee and supporting the development of AI governance.
· Managing and advising on data breaches.
· Supporting HR, Marketing and other business functions on data protection matters.
· Delivering engaging GDPR and compliance training and helping build a strong culture of compliance.
· Supporting audits, governance activities, compliance programmes and best-practice initiatives.


About you


We are open on qualification level. The key requirement is at least 3 years' experience working on GDPR / data protection law. You are likely to be either an in-house lawyer specialising primarily in GDPR / data protection, or a private practice lawyer with a strong data protection-focused practice.
You will have strong drafting skills, sound technical knowledge and the confidence to work autonomously, advising stakeholders across the business and identifying issues proactively.


The opportunity


· Ideally 4 days per week; 5 days full time also considered.
· Genuine ownership and autonomy over the UK data protection agenda.
· An established GDPR framework to develop rather than rebuild.
· A varied, drafting-heavy role with exposure to commercial contracts.
· Involvement in AI, technology, cyber security and regulatory change.
· International exposure through the wider European group.
· A collaborative and supportive culture.
· A role with genuine visibility and influence across the business.


The business is HQ'd in the East Midlands, with just 1-2 days per week required in the office.