Senior Data Protection Legal Counsel

Fry & Brown; Slough; On-site; GBP 120,000 - 170,000; Full time

Job summary

Fry & Brown is seeking a Senior Data Protection Legal Counsel to lead its data protection function in the UK. You will provide hands-on legal advice, deputise for the DPO, and drive privacy governance across Underwriting, Claims, IT, and Risk.

The role involves advising on UK GDPR, PECR, DPIAs, and international data transfers, with a focus on practical business solutions and regulatory compliance.

Qualifications

• Advising on UK GDPR obligations and privacy law.
• Leading and deputising for the DPO and DP team leadership.
• Guidance on AI privacy governance and DPIAs.
• Handling international transfer risk assessments and data subject rights requests.

Responsibilities

• Advise business on legal/regulatory privacy obligations.
• Lead Data Protection team and coordinate with stakeholders.
• Oversee data breach management and privacy risk assessments.
• Draft board/committee reports and promote GDPR awareness.

Skills

UK GDPR

Data Protection Law

Stakeholder management

Team leadership

AI privacy governance

Education

Solicitor qualification

Job description

A well-established international insurance group is looking to appoint a Senior Data Protection Legal Counsel to lead its data protection function, working closely with senior stakeholders across Underwriting, Claims, Operations, IT, Information Security, Compliance and Risk.

This is a broad, senior-level role combining hands‑on legal advisory work with leadership of the Data Protection team, reporting to the Head of Legal and Data Protection Officer.

What's involved:

• Advising the business on its legal and regulatory obligations under UK GDPR and related privacy laws
• Leading and managing the Data Protection team, with scope to deputise for the DPO
• Advising on AI and privacy governance frameworks, including oversight of Data Privacy Impact Assessments
• Overseeing international transfer risk assessments, data subject rights requests and breach management
• Advising on data protection clauses in third‑party contracts, including international transfer mechanisms
• Drafting board and committee reports and promoting GDPR awareness across the business

About you:

• Qualified solicitor, barrister or equivalent legal professional with demonstrable PQE
• Data Protection qualification preferred (CIPP/E, CIPM, CIPT or equivalent)
• Extensive knowledge of UK GDPR, PECR and related privacy laws
• Strong stakeholder management skills and the ability to translate legal requirements into practical business solutions
• Insurance sector experience, particularly delegated authority and third‑party oversight arrangements, is desirable