Data Protection Consultant (UK GDPR, EU GDPR and International Data Transfers)

Intelance Digital Enablement Services Ltd.; Greater London; Sur place; GBP 92 000 - 115 000; Plein temps

Avantages offerts par ce poste

Day rate £500-£625

Fully remote within the UK

IR35 outside

Associate panel access

Résumé du poste

Intelance Digital Enablement Services Ltd. seeks an experienced data protection consultant for a remote UK engagement, starting late October 2026, subject to client approval.

You will review and redraft terms of use and data processing agreements for a platform with EU/UK/US/Asia users, and prepare plain-English responses to common questions. You will work with an engagement partner and the client's solicitors to ensure compliant data protection wording, including cross-border transfers and UK

Qualifications

• 5 years or more working in data protection or privacy, as a consultant, data protection officer or in-house adviser.
• Hands on experience of international data transfers under UK GDPR and EU GDPR, including Standard Contractual Clauses, the UK International Data Transfer Agreement or Addendum, and transfer risk assessments.
• You have reviewed or drafted terms of use, data processing agreements or privacy notices for a software platform.
• A recognised qualification such as CIPP/E or the BCS Practitioner Certificate in Data Protection.
• You write short, clear documents that people outside legal and IT can act on.
• Right to work in the UK, and able to work through your own limited company or as a self-employed contractor.
• Desirable: working knowledge of China's Personal Information Protection Law (PIPL).
• Desirable: experience with charities, standards or certification bodies, or supply chain platforms.

Responsabilités

• Review the data protection and security sections of the platform's terms of use, and redraft them so they are clear and consistent.
• Set out the client's position as data controller when users in other countries can see data that is stored in the EU, and the safeguards it needs.
• Check the supplier's data processing agreement against how the platform is really used.
• Write plain English answers to the data protection questions that platform users keep asking.
• Prepare a short list of points for the client's UK solicitor to confirm, and work alongside a law firm that is advising on China's data protection law.
• Hand over cleanly to the Intelance colleague who will update the client's data security policy.

Connaissances

Data protection

Privacy compliance

UK GDPR

EU GDPR

Formation

CIPP/E

BCS Practitioner Certificate in Data Protection

Description du poste

Join the Intelance associate panel. The first engagement starts in late October 2026, subject to client approval.

Intelance is a UK advisory firm working on technology governance, cyber security and data governance. We are looking for an experienced data protection consultant to help a UK non-profit get the data protection terms for its online supply chain platform right. The platform has users in the UK, Europe, the US and Asia, including China. You will work with an Intelance engagement partner, and the client's own solicitors will approve the final legal wording.

Tasks

• Review the data protection and security sections of the platform's terms of use, and redraft them so they are clear and consistent.

• Set out the client's position as data controller when users in other countries can see data that is stored in the EU, and the safeguards it needs.

• Check the supplier's data processing agreement against how the platform is really used.

• Write plain English answers to the data protection questions that platform users keep asking.

• Prepare a short list of points for the client's UK solicitor to confirm, and work alongside a law firm that is advising on China's data protection law.

• Hand over cleanly to the Intelance colleague who will update the client's data security policy.

Requirements

• 5 years or more working in data protection or privacy, as a consultant, data protection officer or in-house adviser.

• Hands on experience of international data transfers under UK GDPR and EU GDPR, including Standard Contractual Clauses, the UK International Data Transfer Agreement or Addendum, and transfer risk assessments.

• You have reviewed or drafted terms of use, data processing agreements or privacy notices for a software platform.

• A recognised qualification such as CIPP/E or the BCS Practitioner Certificate in Data Protection.

• You write short, clear documents that people outside legal and IT can act on.

• Right to work in the UK, and able to work through your own limited company or as a self-employed contractor.

• Desirable: working knowledge of China's Personal Information Protection Law (PIPL).

• Desirable: experience with charities, standards or certification bodies, or supply chain platforms.

Benefits

• Day rate of £500 to £625, depending on experience.

• About 2 days of work over the first 2 weeks, with a short follow-up if the client's solicitor raises points.

• Fully remote within the UK, with flexible hours.

• Contract role through your own limited company or as a self-employed contractor. We expect it to fall outside IR35, and we confirm this before you start.

• A place on the Intelance associate panel for future data governance work.