Global Data Privacy Rights & Complaints Lead

Clyde & Co US; Greater London; On-site; GBP 90,000 - 150,000; Full time

Job summary

Clyde & Co US is seeking a senior data protection professional to lead the firm's global response to DSARs and privacy complaints. The role involves end-to-end management, supervision of analysts, and collaboration with the Head of Data Protection and DPO to ensure compliant processes across APAC, MEA and Europe.

You will refine the rights request framework, develop a scalable global operating model, and provide strategic guidance on risk, privilege and confidentiality in a regulated,

Qualifications

• Lawyer or experienced data protection professional with at least five years' experience in data privacy and data protection compliance.
• Significant experience leading the operational management of data subject rights requests, privacy complaints and related disputes.
• Strong knowledge of data protection and privacy law, with the ability to apply legal and regulatory requirements to complex operational matters.
• Strong judgement and investigative skills, with a sound understanding of privilege, client confidentiality and litigation in a regulated environment.
• Demonstrable experience supervising review teams and making defensible decisions on scope, exemptions, privilege, confidentiality, disclosure and risk.
• Experience developing and improving operational processes and controls, rather than solely administering established procedures.
• Experience operating across multiple jurisdictions, supporting expansion of rights request and complaint handling processes

Responsibilities

• Lead the end-to-end management of data subject rights requests (DSARs) and other data subject rights requests, supervising analysts and supporting resources as required.
• Oversee initial triage and assessment including scope, complexity, legal and regulatory risk and resourcing requirements.
• Direct response strategies, particularly where matters involve litigation, regulatory considerations or reputational risk.
• Direct searches for relevant information and provide second-level review and quality assurance of outputs and redactions.
• Assess application of exemptions and restrictions, proportionality, identity verification requirements and statutory timescales.
• Review and approve final response packs, correspondence and response letters, escalating novel or high-risk matters when appropriate.
• Maintain accurate records and audit trails to demonstrate compliance with legal requirements and internal procedures.
• Lead the investigation and resolution of data protection and privacy-related complaints from initial assessment through to closure.
• Conduct factual investigations and gather evidence from relevant stakeholders where required.
• Assess findings, document conclusions and make recommendations to Head of Data Protection.
• Review and approve final complaint responses and related communications.
• Manage communications with complainants, including contentious, sensitive or escalated matters.
• Escalate significant risks and issues, identifying lessons learned and recommending remedial actions.
• Review and enhance existing rights request and complaint-handling processes and controls.
• Support design and implementation of a scalable global operating model for rights requests and complaints.
• Develop and maintain SOPs, playbooks, guidance and templates.
• Identify opportunities for automation and workflow improvement.
• Lead implementation across APAC and MEA, expanding to Europe.
• Develop management information, reporting frameworks and performance metrics.
• Analyse trends to identify recurring issues and risks.
• Support training and development of analysts involved in rights handling.

Skills

Data privacy

Privacy law

Investigative skills

Leadership

Jurisdiction experience

Confidentiality

Job description

Clyde & Co US is seeking a senior data protection professional to lead the firm's global response to DSARs and privacy complaints. The role involves end-to-end management, supervision of analysts, and collaboration with the Head of Data Protection and DPO to ensure compliant processes across APAC, MEA and Europe.

You will refine the rights request framework, develop a scalable global operating model, and provide strategic guidance on risk, privilege and confidentiality in a regulated,