London Data Privacy Advisor (UK GDPR & DPIA)

Brown & Brown, Inc.; Greater London; On-site; GBP 42,000 - 64,000; Full time

Job summary

Brown & Brown (UK) is seeking a Data Protection Advisor to join the London team. You will provide practical privacy guidance, manage data subject rights requests, and help ensure compliance with UK GDPR, the Data Protection Act 2018 and PECR.

The role involves reviewing contracts with data processors, supporting DPIAs, assisting with data breach investigations, and raising privacy awareness across the business.

Qualifications

• 2 to 5 years’ practical data protection or privacy experience.
• Proven experience managing DSARs independently.
• Good working knowledge of UK GDPR and PECR.
• Experience reviewing contracts and data processing agreements.
• Experience providing privacy advice to business stakeholders.
• Experience supporting and reviewing DPIAs.

Responsibilities

• Lead end-to-end handling of Data Subject Access Requests (DSARs) and other individual rights requests, ensuring responses are accurate, complete and issued within statutory deadlines.
• Provide day-to-day data protection and privacy advice to colleagues and stakeholders across the business.
• Review marketing activities for compliance with UK GDPR and PECR.
• Review supplier contracts, data processing agreements and data protection clauses, and advise on risk and negotiation positions.
• Support the completion of Data Protection Impact Assessments (DPIAs) and carry out first-line reviews.
• Assist with data breach investigations and incident management, including assessment, documentation and follow-up actions.
• Support the delivery of privacy training and awareness activities.

Skills

DSAR handling

Privacy advice

Contract review

DPIAs

UK GDPR knowledge

PECR knowledge

Stakeholder communication

Education

Privacy qualification (PDP/CIPP/E/CIPM)

Job description

Brown & Brown (UK) is seeking a Data Protection Advisor to join the London team. You will provide practical privacy guidance, manage data subject rights requests, and help ensure compliance with UK GDPR, the Data Protection Act 2018 and PECR.

The role involves reviewing contracts with data processors, supporting DPIAs, assisting with data breach investigations, and raising privacy awareness across the business.