Senior Privacy Lawyer

JR United Kingdom; Coventry; Remote; GBP 50,000 - 80,000; Full time

Job summary

A leading HealthTech firm is seeking a fully remote privacy lawyer for a 12-month FTC role, working closely with management and compliance teams. This position offers a unique opportunity to provide strategic legal advice, draft essential agreements, and manage complex data protection requirements. The role combines expert legal knowledge with collaboration across various business functions to ensure privacy compliance.

Qualifications

• Proven experience in providing strategic legal advice on privacy matters.
• Expertise in drafting and negotiating commercial agreements.
• Ability to identify and manage privacy risks effectively.

Responsibilities

• Provide expert legal advice regarding privacy regulations.
• Draft and negotiate data privacy clauses for agreements.
• Conduct privacy risk assessments and audits.

Skills

Legal expertise in privacy matters

Negotiation skills

Analytical skills

Education

Qualified lawyer

Job description

Social network you want to login/join with:

This role is a unique, fully remote, 4-day-a-week, 12-month FTC position (salary is pro-rata) for a leading HealthTech firm.

Reporting to the Legal Director, this role will work closely with the Group Data Protection Officer and other compliance teams and senior personnel on a range of privacy matters.

Main Accountabilities:

1. Provide expert and strategic legal advice regarding privacy matters, including applicable regulatory updates, to management, the GDPO, and senior leaders.
2. Draft, negotiate, and advise on data privacy clauses for a range of commercial agreements.
3. Lead complex privacy reviews and negotiations, liaising with multiple business functions as appropriate.
4. Draft and advise on complex data protection-related documentation, including privacy audit documentation, data flow diagrams, user journeys, and privacy impact assessments for technology use cases involving large volumes of special category data.
5. Identify and advise on privacy risks in group operations.
6. Support the GDPO with the implementation and maintenance of the Group’s privacy program, including:

• Advising on ROPA requirements
• Advising and supporting on DSAR handling
• Reviewing legal risks in processing activities (using the One Trust platform)
• Advising on MI reporting and analytics activities