Senior Privacy Lawyer

JR United Kingdom; Glasgow; Remote; GBP 60,000 - 90,000; Full time

Job summary

A leading HealthTech firm is seeking a skilled legal advisor specializing in privacy matters for a fully remote, 12-month FTC role. This position involves working closely with compliance teams, providing strategic legal guidance, and managing privacy risks across the organization. The ideal candidate has extensive experience in data protection law and is adept at drafting and negotiating legal documentation.

Qualifications

• Experience in data protection law and privacy compliance is essential.
• Ability to draft and negotiate commercial agreements is crucial.
• Familiarity with handling complex privacy-related documentation.

Responsibilities

• Provide strategic legal advice regarding privacy matters to senior management.
• Lead privacy reviews and negotiations with various business functions.
• Support implementation of privacy programs and compliance activities.

Skills

Legal advice

Privacy compliance

Negotiation

Risk assessment

Job description

Social network you want to login/join with:

This role is a unique, fully remote, 4-day-a-week, 12-month FTC position (salary is pro-rata) for a leading HealthTech firm.

Reporting to the Legal Director, this role will work closely with the Group Data Protection Officer and other compliance teams and senior personnel on a range of privacy matters.

Main Accountabilities:

• Provide expert and strategic legal advice regarding privacy matters, including applicable regulatory updates, to management, the GDPO, and senior leaders.
• Draft, negotiate, and advise on data privacy clauses for a range of commercial agreements.
• Lead complex privacy reviews and negotiations, liaising with multiple business functions as appropriate.
• Draft and advise on complex data protection-related documentation, including privacy audit documentation, data flow diagrams, user journeys, and privacy impact assessments for technology use-cases involving large volumes of special category data.
• Identify and advise on privacy risks in group operations.
• Support the GDPO in implementing and maintaining the Group’s privacy programme, including:
• Advising on ROPA requirements
• Supporting DSAR handling
• Reviewing legal risks in processing activities (using the One Trust platform)
• Advising on MI reporting and analytics activities