In-house Data Privacy Lawyer - Part time 4 days p/w - East Mids

An established international goods & services business is looking for an experienced GDPR / Data Protection Lawyer to join its UK & Ireland Legal & Compliance team.

This is a high-autonomy role, reporting to the Head of Legal / DPO, with responsibility for acting as the trusted legal adviser on UK & Ireland data protection law. The business has a well-established GDPR framework, so the opportunity is to own, evolve and improve the function as the business, technology and regulatory landscape develops.

The role

• Advising on UK data protection / GDPR matters and ensuring compliance with legal, regulatory and internal requirements.
• Managing DSARs with the support of a paralegal.
• Maintaining and developing the UK Record of Processing Activities (ROPA).
• Overseeing DPIAs / Privacy Impact Assessments and Legitimate Interest Assessments.
• Creating, updating and maintaining privacy notices.
• Advising on international data transfers.
• Acting as the primary legal contact with the ICO.
• Advising on the data protection implications of new systems, technologies, products and business initiatives, including AI.
• Sitting on the AI Committee and supporting the development of AI governance.
• Managing and advising on data breaches.
• Supporting HR, Marketing and other business functions on data protection matters.
• Delivering engaging GDPR and compliance training and helping build a strong culture of compliance.
• Supporting audits, governance activities, compliance programmes and best-practice initiatives.

About you

We are open on qualification level. The key requirement is at least 3 years' experience working on GDPR / data protection law. You are likely to be either an in-house lawyer specialising primarily in GDPR / data protection, or a private practice lawyer with a strong data protection-focused practice.

You will have strong drafting skills, sound technical knowledge and the confidence to work autonomously, advising stakeholders across the business and identifying issues proactively.

The opportunity

• Ideally 4 days per week; 5 days full time also considered.
• Genuine ownership and autonomy over the UK data protection agenda.
• An established GDPR framework to develop rather than rebuild.
• A varied, drafting-heavy role with exposure to commercial contracts.
• Involvement in AI, technology, cyber security and regulatory change.
• International exposure through the wider European group.
• A collaborative and supportive culture.
• A role with genuine visibility and influence across the business.

The business is HQ'd in the East Midlands, with just 1-2 days per week required in the office.