Senior Privacy Lawyer

JR United Kingdom; Hemel Hempstead; Remote; GBP 60,000 - 90,000; Full time

Job summary

A leading HealthTech firm seeks a Privacy Counsel for a fully remote, 12-month FTC position. The role entails providing strategic legal advice on privacy matters, drafting commercial agreements, and supporting compliance teams. Ideal candidates will excel in risk assessment and documentation related to data privacy, working closely with senior management.

Qualifications

• Provide expert legal advice on privacy matters and regulatory updates.
• Experience drafting privacy clauses and data protection documentation.
• Ability to lead privacy reviews and identify risks.

Responsibilities

• Draft, negotiate, and advise on data privacy clauses for commercial agreements.
• Support the implementation of the Group’s privacy programme and ROPA requirements.
• Conduct complex privacy reviews and liaise with various business functions.

Skills

Legal advice

Data privacy regulations

Risk assessment

Negotiation

Education

Law degree

Qualified solicitor or equivalent

Tools

One Trust platform

Job description

Social network you want to login/join with:

This role is a unique, fully remote, 4-day-a-week, 12-month FTC position (salary is pro-rata) for a leading HealthTech firm.

Reporting to the Legal Director, this role will work closely with the Group Data Protection Officer and other compliance teams and senior personnel on a range of privacy matters.

Main Accountabilities:

1. Provide expert and strategic legal advice regarding privacy matters, including applicable regulatory updates, to management, the GDPO, and senior leaders.
2. Draft, negotiate, and advise on data privacy clauses for various commercial agreements.
3. Lead complex privacy reviews and negotiations, liaising with multiple business functions as appropriate.
4. Draft and advise on complex data protection-related documentation, including privacy audit documentation, data flow diagrams, user journeys, and privacy impact assessments for technology use-cases involving large volumes of special category data.
5. Identify and advise on privacy risks in the group operations.
6. Support the GDPO with the implementation and maintenance of the Group’s privacy programme, including:

• Advising on ROPA requirements
• Supporting DSAR handling
• Reviewing legal risks in processing activities (using the One Trust platform)
• Advising on MI reporting and analytics activities