Data Protection Advisor: Commercial & Supplier Risk

Mills & Reeve; Norwich; On-site; GBP 55,000 - 90,000; Full time

Job summary

Mills & Reeve is recruiting a Data Protection Specialist to act as a trusted adviser on data protection across the firm. You will develop and own key areas of the operational and commercial data protection programme and work with partners, lawyers and business services to embed compliance into decision-making.

The role focuses on non-contentious data protection, supplier management, international data transfers, procurement and client engagements, reporting to the General Counsel and working

Qualifications

• Experience in operational and commercial data protection with strong UK GDPR knowledge.
• Ability to translate regulatory requirements into practical business advice for senior stakeholders.
• Experience in a regulated environment, ideally in professional services or law firm.

Responsibilities

• Provide data protection guidance across the firm to manage risk and support business decisions.
• Lead supplier management, client and supplier contractual data protection provisions.
• Oversee data protection due diligence, international transfers, audits and governance activities.
• Advise on data subject rights, incidents, and governance obligations across departments.
• Collaborate with multiple stakeholders to embed data protection into processes and procurement.

Skills

Data protection

Regulatory compliance

Contract review

Stakeholder management

Non-contentious data protection

Education

Law or data privacy focus

Tools

Data protection impact assessments

Audit reporting

Job description

Mills & Reeve is recruiting a Data Protection Specialist to act as a trusted adviser on data protection across the firm. You will develop and own key areas of the operational and commercial data protection programme and work with partners, lawyers and business services to embed compliance into decision-making.

The role focuses on non-contentious data protection, supplier management, international data transfers, procurement and client engagements, reporting to the General Counsel and working