Senior Privacy Lawyer

JR United Kingdom; Exeter; Remote; GBP 50,000 - 80,000; Full time

Job summary

A leading HealthTech firm seeks a Privacy Counsel for a fully remote, 4-day-a-week position. The role involves providing expert legal advice on privacy matters, drafting agreements, and leading complex privacy reviews. This 12-month FTC role allows for a significant impact on the company's privacy strategies within a collaborative environment.

Qualifications

• Significant experience in data protection law and privacy.
• Strong negotiation and drafting capabilities.
• Ability to manage multiple stakeholders and complex legal issues.

Responsibilities

• Provide strategic legal advice on privacy matters to senior management.
• Draft and negotiate data privacy clauses in commercial agreements.
• Lead privacy reviews and documentation for large-scale data operations.

Skills

Expert legal advice

Drafting agreements

Privacy risk assessment

Data protection strategies

Negotiation skills

Education

Qualified lawyer

Tools

One Trust

Job description

Social network you want to login/join with:

This role is a unique, fully remote, 4-day-a-week, 12-month FTC position (salary is pro-rata) for a leading HealthTech firm.

Reporting to the Legal Director, this role will work closely with the Group Data Protection Officer and other compliance teams and senior personnel on a range of privacy matters.

Main Accountabilities:

1. Provide expert and strategic legal advice regarding privacy matters, including applicable regulatory updates, to management, the GDPO, and senior leaders.
2. Draft, negotiate, and advise on data privacy clauses for a range of commercial agreements.
3. Lead complex privacy reviews and negotiations, liaising with multiple business functions as appropriate.
4. Draft and advise on complex data protection-related documentation, including privacy audit documentation, data flow diagrams, user journeys, and privacy impact assessments for technology use-cases involving large volumes of special category data.
5. Identify and advise on privacy risks in group operations.
6. Support the GDPO with the implementation and maintenance of the Group’s privacy programme, including:

• Advising on ROPA requirements
• Supporting DSAR handling
• Reviewing legal risks in processing activities (using the One Trust platform)
• Advising on MI reporting and analytics activities