Data Protection Paralegal, Leeds, Manchester or Glasgow

Addleshaw Goddard; Leeds; On-site; GBP 26,000 - 42,000; Full time

Job summary

Addleshaw Goddard's Office of the General Counsel is seeking a Data Protection Paralegal to join its growing Data Protection team, focusing on managing Data Subject Access Requests (DSARs) and other data subject rights requests within a large international law firm.

You will support GDPR and wider data protection matters, contribute to developing DSAR processes, coordinate with IT, Information Security, HR and business services, and help deliver practical guidance and training across the firm.

Qualifications

• High level of attention to detail and organisational skills.
• Ability to manage multiple deadlines and respond with urgency.
• Strong written and verbal communication and a proactive approach.

Responsibilities

• Managing DSARs and other data subject rights requests from receipt to closure.
• Coordinating searches across the business with stakeholders to identify relevant information.
• Conducting document reviews, applying redactions and preparing disclosures.
• Tracking statutory deadlines and handling follow-up correspondence.
• Maintaining accurate logs and audit trails.
• Contributing to DSAR process development and improvement.
• Supporting the team on wider data protection matters.

Skills

Attention to detail

Organisational skills

Time management

Communication skills

Proactive approach

Work ethic

Deadline-driven

Interest in data protection

Tools

Everlaw

Relativity

Job description

Our Office of the General Counsel (OGC) is seeking a Data Protection Paralegal to join its growing Data Protection team. This is an excellent opportunity for someone looking to develop specialist expertise in GDPR and data protection within a large international law firm, working closely with lawyers and colleagues across IT, Information Security, HR and other business services functions.

The role will focus primarily on managing the firm's response to Data Subject Access Requests (DSARs) and other data subject rights requests. The successful candidate will also support the team on a broad range of GDPR and wider data protection matters.

The Data Protection team sits within the OGC and is responsible for overseeing the firm's data protection compliance framework.

The team supports all areas of the firm in all its offices, by providing practical advice on data protection compliance, managing data protection risks and responding to regulatory requirements. A significant part of the team's work involves handling data subject rights requests, conducting privacy risk assessments, advising on complex data protection matters, including AI-related projects, international data transfers and regulatory developments, overseeing personal data breach responses, and delivering training and guidance across the firm.

Unlike many data protection teams, we combine legal advice, operational delivery and technology-enabled solutions, providing exposure to both the legal and practical aspects of data protection compliance.

What You'll Do

The successful candidate will be a key member of the firm's in-house Data Protection team supporting the team across a broad range of data protection matters, with a primary focus on managing Data Subject Access Requests (DSARs) and other data subject rights requests.

The Role Will Involve

• Managing DSARs and other data subject rights requests from receipt to closure.
• Coordinating searches across the business and working with stakeholders to identify relevant information.
• Conducting document reviews, applying redactions and preparing disclosures.
• Tracking statutory deadlines and handling follow-up correspondence.
• Maintaining accurate logs and audit trails.
• Contributing to the ongoing development and improvement of the firm's DSAR processes and procedures.
• Supporting the team on wider data protection matters.

Who We're Looking For

A successful candidate will need the following skills and competencies:

• a high level of attention to detail;
• effective personal, organisational and time management skills, and the ability to manage multiple demands;
• strong written and verbal communication skills, with the ability to communicate effectively with colleagues at all levels;
• a positive, enthusiastic and proactive approach to work;
• a strong work ethic and a desire to develop and succeed;
• the ability to work to tight deadlines and respond with a sense of urgency; and
• an interest in data protection law and practice.

Ideally

• experience managing DSARs;
• familiarity with UK GDPR and data protection principles;
• experience using review platforms such as Everlaw, Relativity or similar tools; and
• experience working in a law firm, in-house legal team or compliance function.

Why Choose Us?

Addleshaw Goddard is a place where you are not just valued but encouraged to reach your full potential. Our culture promotes improvement, growth, and collaboration, making us the natural choice for top-tier clients. We celebrate diversity and are committed to creating an inclusive environment for all our employees.