Data Protection Advisor

897 Brown & Brown (Europe) Limited; City Of London; On-site; GBP 50,000 - 70,000; Full time

Job summary

Brown & Brown (UK) in London is seeking a Data Protection Advisor to provide practical privacy advice and ensure compliance with UK GDPR, DP Act 2018 and PECR. You will manage DSARs, review contracts, and support DPIAs and incident management while promoting privacy awareness across the business.

The role offers a collaborative environment with a focus on practical, business-facing privacy solutions and ongoing training. Negotiable salary + benefits.

Qualifications

• 2–5 years of practical data protection or privacy experience.
• Proven experience managing DSARs independently.
• Good working knowledge of UK GDPR and PECR.
• Experience reviewing contracts and data processing agreements.
• Experience providing privacy advice to business stakeholders.
• Experience supporting and reviewing DPIAs.

Responsibilities

• Lead end-to-end handling of DSARs and other individual rights requests within statutory deadlines.
• Provide day-to-day data protection and privacy guidance to colleagues and stakeholders.
• Review supplier contracts and DPAs, advising on risk and negotiation positions.
• Support the completion of DPIAs and carry out first-line reviews.
• Assist with data breach investigations and incident management.
• Support privacy training and awareness activities.

Skills

DSARs

UK GDPR

PECR

DPIAs

Privacy advice

Job description

Built on meritocracy, our unique company culture rewards self-starters and those who are committed to doing what is best for our customers.

Job Description: Data Protection Advisor Company: Brown & Brown (UK) Location: Mark Lane / Aldgate House, London Salary: Negotiable + Benefits

Role Purpose

We are currently looking for a Data Protection Advisor to join the welcoming and professional London team. The Data Protection Advisor provides practical, business-facing privacy advice and helps ensure Brown & Brown (UK) meets its obligations under UK GDPR, the Data Protection Act 2018 and PECR. The role manages individual rights requests, supports the review of suppliers and marketing activity, and contributes to incident management and privacy awareness across the business.

Key Responsibilities

• Individual rights Lead the end-to-end handling of Data Subject Access Requests (DSARs) and other individual rights requests, ensuring responses are accurate, complete and issued within statutory deadlines.
• Advice and guidance Provide day-to-day data protection and privacy advice to colleagues and stakeholders across the business. Review marketing activities for compliance with UK GDPR and PECR.
• Contracts and suppliers Review supplier contracts, data processing agreements and data protection clauses, and advise on risk and negotiation positions.
• Risk and assurance Support the completion of Data Protection Impact Assessments (DPIAs) and carry out first-line reviews.
• Incidents Assist with data breach investigations and incident management, including assessment, documentation and follow-up actions.
• Training and awareness Support the delivery of privacy training and awareness activities.

Person Specification

Essential

• 2 to 5 years' practical data protection or privacy experience.
• Proven experience managing DSARs independently.
• Good working knowledge of UK GDPR and PECR.
• Experience reviewing contracts and data processing agreements.
• Experience providing privacy advice to business stakeholders.
• Experience supporting and reviewing DPIAs.

Desirable

• Privacy qualification such as PDP, CIPP/E or CIPM.

Skills and Attributes

• Clear, concise communicator who can explain legal requirements in practical terms.
• Sound judgement and the confidence to advise and, where necessary, challenge.
• Strong organisational skills, with the ability to manage competing deadlines.
• Discretion when handling sensitive and confidential information.

We are an Equal Opportunity Employer. We take pride in the diversity of our team and seek diversity in our applicants.

Founded in 1939 as a small, two-partner firm, Brown & Brown (NYSE: BRO) and our team of companies have grown into one of the world’s largest insurance brokerages while staying true to our foundation of trust, resilience and delivering results. With a team that is as connected locally as it is globally, our high-performing, highly collaborative team delivers innovative risk and insurance solutions. We look for individuals who embrace our culture, thrive in a collaborative environment, are driven to grow and succeed and are committed to always doing what is right. With a unique culture built on integrity, superior capabilities and grit, we value teamwork, trust and courage. We think of ourselves as a team, so we have teammates—not employees, and leaders—not managers. Everything we do is about the greater “WE”—never “me.” While diverse in abilities and experience, we are all connected through our core values, a commitment to our local communities and a shared mission—always doing what is best for our customers.