Data Protection Officer

Flex Legal; Slough; Hybrid; GBP 96,000 - 126,000; Full time

Job summary

Flex Legal is seeking an experienced Interim Data Protection Officer to provide senior-level privacy guidance across UK GDPR, EU data protection requirements, and AI regulation within a fast-growing technology business in London. You will work closely with Legal, Product, Engineering and Security to support risk management and regulatory compliance.

This hybrid role requires strong DPO credentials, experience as a data controller, and the ability to balance regulatory obligations with commercial

Qualifications

• Senior-level DPO or deputy DPO with recent DPO experience.
• Strong expertise in UK GDPR, EU data protection requirements and AI regulation.
• Experience managing complex privacy risks and providing pragmatic, commercially focused advice.
• Experience as data controller, not just processor/vendor environment.
• Strong B2C data experience; B2B experience desirable.

Responsibilities

• Act as interim DPO, overseeing data protection compliance across the business.
• Provide pragmatic, commercially focused advice on privacy matters (UK GDPR, EU laws, AI regulation).
• Partner with Legal, Product, Engineering, Security and senior stakeholders to support risk management.
• Assess complex privacy risks and guide regulatory compliance practically.
• Develop and mature the DPO function within a growing technology-focused business.
• Balance regulatory obligations with commercial and operational objectives as a trusted advisor.
• Collaborate with Deputy DPO and Privacy Manager for senior oversight of DPO function.
• Help build governance, processes, and ways of working in a fast-paced tech environment.

Skills

Senior DPO experience

UK GDPR expertise

Data protection advice

Stakeholder engagement

Job description

About the job

Our client, a leading FTSE-listed technology business, is seeking an experienced Interim Data Protection Officer (DPO) to provide senior-level data protection support.

Working closely with Legal, Product, Engineering, Security and senior stakeholders, you will provide pragmatic and commercially focused advice across UK GDPR, EU data protection requirements, AI regulation and wider privacy matters.

Key Details:

• Start Date: ASAP
• Duration: Initial 3 months, with a strong possibility of extension
• Working Pattern: Full-time (9:00am–5:30pm)
• Location: London/Hybrid (2 days per week in the office, Wednesday and Thursday)
• Rate: Up to £600 p/d DOE
• Equipment: Equipment provided

Key Responsibilities:

• Acting as the organisation's interim DPO, taking responsibility for and overseeing data protection compliance activities across the business.
• Providing pragmatic, commercially focused advice on UK GDPR, EU data protection requirements, AI regulation and wider privacy matters.
• Partnering closely with Legal, Product, Engineering, Security and senior stakeholders to support business decision-making and effective risk management.
• Assessing complex privacy risks and helping the business navigate regulatory requirements in a practical and proportionate manner.
• Supporting the continued development and maturity of the DPO function within a growing, technology-led business.
• Acting as a trusted senior advisor, balancing regulatory obligations with commercial and operational objectives.
• Working closely with the existing Deputy DPO and Privacy Manager, leveraging their business knowledge and expertise while providing senior oversight of the DPO function.
• Helping to build and develop data protection governance, processes and ways of working within a relatively young and fast-paced technology environment.

Candidate Requirements:

• Senior-level DPO or highly experienced Deputy DPO, with recent DPO experience essential.
• Strong expertise in UK GDPR, EU data protection requirements and AI regulation.
• Proven experience managing complex privacy risks and providing pragmatic, commercially focused advice.
• Experience working as a data controller, rather than solely in a processor/vendor environment essential.
• Strong B2C experience with direct accountability for consumer personal data; B2B experience is also desirable.