Senior Privacy Lawyer

JR United Kingdom; Guildford; Remote; GBP 50,000 - 70,000; Full time

Job summary

A leading HealthTech firm is seeking a fully remote Legal Counsel for a 12-month FTC. This role involves providing strategic legal advice, managing privacy-related documentation, and collaborating closely with the Group Data Protection Officer to ensure compliance with regulations. Ideal candidates will have a strong background in data privacy law and experience with complex commercial agreements.

Qualifications

• Experience in providing legal advice on data protection.
• Ability to draft and negotiate complex agreements.
• Understanding of privacy regulations and compliance.

Responsibilities

• Provide expert legal advice on privacy matters.
• Draft and negotiate data privacy clauses.
• Lead privacy reviews and assess risks across operations.

Skills

Legal advising

Data privacy knowledge

Negotiation

Risk assessment

Document drafting

Education

Law degree

Tools

One Trust platform

Job description

Social network you want to login/join with:

This role is a unique, fully remote, 4 day a week 12-month FTC, (salary is pro-rata) for a leading HealthTech firm.

Reporting to the Legal Director, this role will work closely with the Group Data Protection Officer and other compliance teams and senior personnel on a range of privacy matters.

Main Accountabilities:

1. Provide expert and strategic legal advice regarding privacy matters, including applicable regulatory updates, to management, the GDPO, and senior leaders.
2. Draft, negotiate, and advise on data privacy clauses for a range of commercial agreements.
3. Lead complex privacy reviews and negotiations, liaising with multiple business functions as appropriate.
4. Draft and advise on complex data protection-related documentation, including privacy audit documentation, data flow diagrams, user journeys, and privacy impact assessments for technology use-cases involving the processing of large volumes of special category data.
5. Identify and advise on privacy risks in the group's operations.
6. Support the GDPO with the implementation and maintenance of the Group’s privacy program, including but not limited to:

• Advising on ROPA requirements
• Supporting DSAR handling
• Reviewing legal risks in processing activities using the One Trust platform
• Advising on MI reporting and analytics activities