Data, Privacy, Cyber Associate

Taylor Root; Greater London; On-site; GBP 70,000 - 110,000; Full time

Job summary

Taylor Root is assisting an international law firm in London to hire a mid-level Associate for its Data, Privacy & Cyber practice. The role offers exposure to a broad mix of advisory and transactional privacy work alongside sophisticated cyber and emerging technology matters.

You will advise on UK and EU data protection, cybersecurity incidents, investigations, international transfers, AI governance, and privacy aspects of contracts and transactions.

Qualifications

• Solid experience in data protection/privacy law.
• Exposure to cybersecurity, technology or regulatory matters is desirable.
• Strong drafting and client-facing skills.

Responsibilities

• Advise on UK and EU data protection compliance including GDPR.
• Handle cybersecurity incidents, data breaches and incident response.
• Assist with regulatory investigations and enforcement matters.
• Counsel on international data transfers and cross-border privacy strategies.
• Contribute to AI governance and evolving regulatory landscape.

Skills

Data privacy law

Cybersecurity awareness

Contract drafting

Cross-border matters

Education

Qualified solicitor or barrister

Job description

An international law firm is looking to add a mid-level Associate to its growing Data, Privacy & Cyber practice in London.

The role offers exposure to a broad mix of advisory and transactional privacy work alongside sophisticated cyber and emerging technology matters. The team acts for multinational organisations across sectors including financial services, technology, consumer, retail, luxury and media.

The work

The successful Associate will advise on matters including:

• UK and EU data protection and privacy compliance, including GDPR
• Cybersecurity incidents, data breaches and incident response
• Regulatory investigations and enforcement matters
• International data transfers and cross-border privacy strategies
• AI governance and the evolving regulatory landscape
• New EU digital regulation, including NIS2, DORA and the Cyber Resilience Act
• Data protection considerations within commercial and technology contracts
• Privacy and cybersecurity aspects of corporate transactions
• Employee monitoring, CCTV and other workplace privacy issues

The opportunity

This is a particularly good opportunity for an Associate looking to develop a genuinely broad data practice, rather than focusing solely on traditional GDPR advisory work. There is strong exposure to international mandates, working with major global businesses on increasingly complex data issues.

The ideal candidate

You are likely to:

• Be around 3–4 PQE, although strong candidates either side may be considered
• Have solid experience in data protection/privacy law
• Ideally have some exposure to cybersecurity, technology or regulatory matters
• Be comfortable managing matters with an international or cross-border dimension
• Have strong drafting, technical and client-facing skills