Enforcement Information Lawyer

Financial Reporting Council; Greater London; Hybrid; GBP 60,000 - 90,000; Full time

Benefits offered by this job

30 days annual leave

10% pension contribution

Cycle to work scheme

Staff Employee Assistance Programme

Hybrid working and four-day fortnight

Job summary

Financial Reporting Council (FRC) is the UK regulatory body overseeing audit, corporate governance and reporting. We seek a solicitor or barrister fully qualified to practise in England and Wales with 2–5 years PQE in advising on data protection laws for complex enforcement investigations.

The role involves providing practical legal advice, developing data management policy, and collaborating with lawyers, IT specialists and regulators in a hybrid London/Birmingham setting.

Qualifications

• Qualified solicitor or barrister to practise in England and Wales with proven data protection experience.
• Experience advising on UK GDPR, DPA, FOIA and related law in enforcement contexts.
• Strong legal research and IT proficiency for handling complex investigations.
• Experience delivering training and coordinating with multi-disciplinary teams.

Responsibilities

• Provide legal advice and analysis on data management and policy within enforcement investigations.
• Develop and implement data management policy compliant with data protection laws.
• Draft practical guidance for enforcement teams on data management topics.
• Collaborate with Legal Services Team and IT specialists as needed.
• Engage with government bodies and regulators on data policy issues.
• Prepare and deliver training to enforcement team members.
• Advise on complex data protection questions with external counsel.

Skills

Legal knowledge

Data protection laws

Analytical skills

Communication skills

Project management

IT systems

Legal research

Education

Solicitor/Barrister qualification (England & Wales)

Tools

IT systems knowledge

Job description

The Financial Reporting Council (FRC) mission is to serve the public interest by setting high standards of corporate governance, reporting and audit and holding to account those responsible for delivering them. We are the UK Competent Authority for audit. We also set the UK Corporate Governance and Stewardship Codes as well as UK standards for accounting, auditing and actuarial work, and monitor and take action to promote the quality of corporate reporting and operate independent enforcement arrangements for accountants and actuaries. Further information about our role can be found at www.frc.org.uk.

As the UK Competent Authority for audit, the FRC’s Enforcement Division conducts investigations and takes enforcement action into breaches of audit standards under the Audit Enforcement Procedure (AEP). As the independent disciplinary body for the accountancy and actuarial professions in the UK, the Division also undertakes professional disciplinary investigations and enforcement action under the Accountancy and Actuarial Schemes (the Schemes) in cases involving accountants, accountancy firms and actuaries which raise important issues affecting the public interest in the UK.

Many of the investigations are large, complex, and high-profile and our cases regularly require liaison with other investigators including the Serious Fraud Office, the Financial Conduct Authority, the Insolvency Service, and the Pensions Regulator. Examples of recent case outcomes can be found on our website.

More information on the work of the Division can be found in our Annual Enforcement Review 2025.

The Role:

The role will include:

• Assisting the Enforcement Division’s Information Asset Owner and data management team with the provision of, and contributing your own, high-quality, practical legal advice and analysis on data management and related policy considerations, within the context of supporting Case Lawyers and multi-disciplinary case teams to deliver complex regulatory investigations.
• Supporting the development and implementation of the Enforcement Division’s data management policy and strategy and ensure its compliance with all applicable data protection laws and regulations (including UK GDPR, the DPA, FOIA, other legislation and regulations specific to the FRC’s work and the common law).
• Understanding and demonstrating best practice in complying with applicable laws, regulations and internal policies for the protection of personal, confidential and/or sensitive data.
• Supporting workstreams to implement updates to the Enforcement Division’s suite of policies and procedures on data management and related topics.
• Drafting practical advice and guidance for Enforcement case teams on data management and related topics arising from new and proposed legislative changes as well as developing good practice.
• Engaging with and working alongside lawyers from the FRC’s Legal Services Team and the FRC’s IT experts as and when required.
• Engaging with Government Departments, other regulators and other agencies on legal and policy issues relating to data management as required.
• Preparing and delivering training and presentations to Enforcement team members.
• Supporting with instructing specialist counsel to advise on legal questions relating to data management of high complexity or risk.

You will work as part of a multi-disciplinary team, alongside forensic accountants, lawyers, and legal assistants on data management and related policy issues in the context of supporting the delivery of complex regulatory investigations. The role is accountable to the Enforcement division’s Information Asset Owner, the Senior Policy Lawyer and the Senior Leadership team.

The role will also involve collaboration and engagement with colleagues in many of the FRC’s other Divisions including the Legal Services Team.

The post holder should be able to work flexibly to support the team’s activities and also provide cover within the FRC as necessary. The FRC operates a hybrid working arrangement. This means full-time employees will spend at least four days per fortnight in the office, pro rata for part time employees, and any arrangement will be agreed between the employee and their line manager.

The role may be based in either our London or Birmingham Office. Some travel to our other office location may be required from time to time.

The Person:

The successful candidate must be a solicitor or barrister fully qualified to practise in England and Wales (or other Common Law jurisdiction with demonstrable, relevant experience in the UK) with proven experience (typically PQE 2-5 years, with two years as a minimum) of advising on laws and regulations for the protection of personal, confidential and/or sensitive data (including UK GDPR, the DPA, FOIA, other jurisdiction specific legislation and regulations and the common law) as well as best practice in complying with the same. They will have sound knowledge of current issues and trends in the field and experience of completing, and best practice for, data impact assessments and responding to FOIA requests and SARs.

Preferably this experience will have been gained within the context of working within a division or team carrying out law enforcement or regulatory investigations. Alternatively, it is desirable for candidates to have previous experience working or acting for a prosecuting authority, regulator or disciplinary body with an enforcement/investigation function, in addition to experience of providing legal advice in respect of applicable data protection laws and regulations.

Candidates will be expected to demonstrate the following competencies:

• Excellent legal and technical skills in the areas outlined above
• Excellent analytical skills and judgement
• Ability to support organisations in robustly evaluating and addressing data management risks in an enforcement / investigation context
• Excellent written and oral communication and interpersonal skills, including ability to communicate clearly with a range of internal and external parties and credibility to engage with senior professionals
• Ability to collaborate effectively in a multi-disciplinary environment, with colleagues and stakeholders at all levels to deliver effective solutions
• Determination and self-motivation to pursue matters, make well-reasoned suggestions and propose solutions
• Effective project management and organisational skills including an ability to work well under pressure and to deadlines
• Strong legal research skills and excellent IT skills

Rewards and benefits

• The FRC offers remuneration packages, including 30 days annual leave, ability to buy extra leave.
• Generous employer pension contribution of 10%.
• Staff Employee Assistance Programme including confidential counselling and work life services.
• The FRC offers staff the opportunity to save at least 25% on the purchase of a new bike through the Cycle to work scheme.
• The FRC has a strong work/life balance ethos.

The FRC believes that equality of opportunity and diversity is important in the work that we do and we are strongly committed to being an inclusive employer. Our values of being fair and independent supports this commitment. We're a signatory to the Government's Disability Confident scheme, which means that we guarantee an interview to any disabled candidates entering under the scheme, should they meet the minimum criteria for a role.

Equal opportunities monitoring is an important means of demonstrating and implementing our commitment to promoting equality of opportunity and diversity. Completing our diversity form will assist the FRC to identify any barriers that prevent access to employment and career development for certain groups of people, and to develop solutions, such as action plans, new policies and practices.

The role is based in our London office. The post holder should be able to work flexibly to support the team’s activities and also provide cover within the FRC as necessary. The FRC operates a hybrid working arrangement with its workforce, with precise arrangements to be agreed between the employee and the line manager. FRC operates a four-day fortnight in the office.

We welcome applicants from all backgrounds and communities, and in particular those that are currently under represented in our workforce. This includes, but is not limited to, Black, Asian and Minority Ethnic (BAME) candidates, candidates with disabilities, and female candidates.