Privacy & Data Governance Counsel

Collinson; Greater London; On-site; GBP 90,000 - 130,000; Full time

Job summary

Collinson is a global loyalty and benefits company delivering privacy-aware data solutions across travel and financial services. The role focuses on providing expert legal advice on UK GDPR, PECR and cross-border data transfers within a large in-house team in London.

The successful candidate will work with data protection, information security and commercial teams to embed privacy-by-design and robust governance across Group initiatives, including AI and analytics projects.

Qualifications

• Qualified Solicitor (England & Wales) or equivalent legal qualification.
• Minimum 5 years' post-qualification experience advising on UK data protection and privacy law.
• Experience leading or supporting enterprise data transformation or digital transformation programmes.
• Experience drafting and negotiating Data Processing Agreements, Data Sharing Agreements and SCCs.

Responsibilities

• Provide pragmatic, commercially focused legal advice on complex data protection issues.
• Draft, review and negotiate contracts involving personal data processing and sharing.
• Lead day-to-day data protection queries from business stakeholders and advise on regulatory notification obligations.
• Support enterprise data architecture initiatives and privacy-by-design programmes.
• Advise on AI governance, data ethics and responsible innovation while ensuring regulatory compliance.

Skills

Legal advice

Contract negotiation

Stakeholder management

Data protection

Education

Solicitor qualification (England & Wales)

Tools

Data cataloguing tools

Job description

Collinson is a global loyalty and benefits company delivering privacy-aware data solutions across travel and financial services. The role focuses on providing expert legal advice on UK GDPR, PECR and cross-border data transfers within a large in-house team in London.

The successful candidate will work with data protection, information security and commercial teams to embed privacy-by-design and robust governance across Group initiatives, including AI and analytics projects.