Junior privacy lawyer @ hospitality group

Heriot Brown In-House Legal Recruitment

Greater London

Hybrid

GBP 55,000 - 75,000

Full time

29 hours ago
Be an early applicant

A complete application in a minute

Tailored resume and cover letter, ready to send.

Get past ATS filters

Benefits offered by this job

Competitive salary
Hybrid working in London
Global multi-brand exposure
Development opportunities
Discounts across brands

Job summary

Heriot Brown In-House Legal Recruitment in London seeks a junior Data Protection Lawyer to join an in-house legal team. You will handle day-to-day privacy matters, advise on UK GDPR and PECR, draft DPAs and data processing provisions, and support data subject requests within a fast-paced hospitality group.

The role offers hands-on advisory exposure, collaboration with cross-functional teams, and opportunities to progress within a global multi-brand business in London.

Qualifications

  • Qualified solicitor in England & Wales with 1–3 years' PQE or strong privacy experience
  • Experience in data protection/privacy work in law firm or in-house
  • Strong drafting skills and ability to explain legal concepts to non-lawyers

Responsibilities

  • Advise on UK GDPR, DPA 2018 and PECR queries
  • Assist with DPIAs, data sharing and data processing agreements
  • Support data subject access requests and data breach inquiries
  • Provide practical privacy guidance to marketing, technology, HR and operations
  • Keep abreast of ICO guidance and regulatory trends

Skills

UK GDPR
Data privacy
Drafting
Regulatory guidance
Non-technical advisory

Education

Solicitor qualification (England & Wales)

Job description

Data Protection Lawyer (Junior) | London | In-house
The opportunity

A leading international hospitality and lifestyle group is looking for a junior data protection lawyer to join its in-house legal team in London. The business operates across multiple brands and markets, and handles significant volumes of guest, member, employee and marketing data. This is a chance to build a specialist privacy career inside a fast-growing, brand-led business, with real exposure and early responsibility.

You will work closely with senior legal counsel and with colleagues in marketing, technology, HR and operations. This is a varied role, with plenty of hands‑on advisory work rather than pure compliance administration.

Key responsibilities
  • Advise the business on day-to-day UK GDPR, Data Protection Act 2018 and PECR queries, including the Data (Use and Access) Act 2025 changes
  • Support on data subject access requests and other individual rights requests
  • Draft and negotiate data processing agreements, data sharing agreements and the data protection provisions in commercial contracts
  • Carry out and maintain DPIAs, legitimate interests assessments and records of processing
  • Support on international data transfers, including transfer risk assessments and the use of the UK IDTA and addendum
  • Assist with data breach assessments, response and regulator notifications
  • Help deliver training and guidance to the wider business
  • Keep up to date with regulatory developments, including ICO guidance and enforcement trends, and translate these into practical advice
About you
  • Qualified solicitor in England & Wales, ideally 1-3 years' PQE (NQs with strong privacy experience or a relevant training seat will also be considered)
  • Experience of data protection and privacy work gained in a law firm or in-house
  • Solid working knowledge of UK GDPR and the DPA 2018, with an understanding of EU GDPR
  • Commercial and pragmatic, able to give clear, practical advice to non-lawyers
  • Strong drafting skills and attention to detail
  • Comfortable managing a varied workload and working independently when needed
  • Genuine interest in consumer-facing, brand-led businesses
  • Any privacy certification (such as CIPP/E) or experience in hospitality, retail, consumer or technology is a bonus
What's on offer
  • A competitive salary and benefits package
  • Hybrid working, based in London
  • Exposure to a global, multi-brand business and a collaborative in-house legal team
  • Clear development opportunities, with the chance to broaden into wider commercial and technology work
  • Discounts and perks across the group's brands
Get your free, confidential resume review.

or drag and drop your file here.

Similar jobs

Similar jobs worth comparing

Junior In-House Data Privacy Counsel – London (Hybrid)
Junior In-House Data Privacy Counsel – London (Hybrid)

Heriot Brown In-House Legal Recruitment • Greater London

Hybrid
GBP 55,000 - 75,000
Competitive salary
Hybrid working in London
Global multi-brand exposure
+2
Senior Privacy Counsel (Head of Privacy)
Senior Privacy Counsel (Head of Privacy)

Taylor Root • Greater London

Hybrid
GBP 110,000 - 160,000
Senior Privacy Counsel
Senior Privacy Counsel

Taylor Root • Greater London

Hybrid
GBP 90,000 - 130,000
Assistant General Counsel
Assistant General Counsel

Larson Maddox • Greater London

On-site
GBP 110,000 - 170,000
Legal Counsel - Data
Legal Counsel - Data

Mountain Warehouse • Greater London

Hybrid
GBP 90,000 - 130,000
Hybrid working
Holiday allowance
Staff discount
+2
In-House Data Privacy Solicitor 5+ PQE
In-House Data Privacy Solicitor 5+ PQE

Oculus Legal Group • Newport

On-site
GBP 90,000 - 130,000
Senior Data Lawyer
Senior Data Lawyer

Taylor Root • Greater London

On-site
GBP 90,000 - 150,000
Data Privacy Lawyer
Data Privacy Lawyer

Publicis Groupe UK • Greater London

Hybrid
GBP 90,000 - 130,000
Hybrid working pattern
Pension
Private Medical
+2
Associate, Commercial: Data Privacy - Leading Global Law Firm (4-8 PQE)
Associate, Commercial: Data Privacy - Leading Global Law Firm (4-8 PQE)

Rutherford • Greater London

On-site
GBP 70,000 - 90,000
Commercial Solicitor
Commercial Solicitor

William James Recruitment • Manchester

On-site
GBP 80,000 - 90,000
Bonus
Benefits package
Annual leave
+3