Senior Privacy Lawyer

JR United Kingdom; Maidstone; Remote; GBP 60,000 - 80,000; Full time

Job summary

A leading HealthTech firm is seeking a Privacy Legal Advisor for a fully remote, 12-month FTC position. Reporting to the Legal Director, the role involves offering expert legal advice on privacy matters, drafting data privacy documents, and supporting the implementation of the Group’s privacy program. Relevant legal expertise and a law degree are essential for success in this position.

Qualifications

• Experienced legal professional with expertise in privacy law.
• Ability to draft and negotiate data-related agreements.
• Familiarity with privacy audit documentation is essential.

Responsibilities

• Provide strategic legal advice on privacy regulations.
• Draft and negotiate data privacy clauses in agreements.
• Lead privacy reviews and address risks within operations.

Skills

Legal advice on privacy matters

Data privacy contract negotiation

Privacy risk assessment

Education

Law degree (JD or equivalent)

Tools

One Trust

Job description

Social network you want to login/join with:

This role is a unique, fully remote, 4-day-a-week 12-month FTC position (salary is pro-rata) for a leading HealthTech firm.

Reporting to the Legal Director, this role will work closely with the Group Data Protection Officer and other compliance teams and senior personnel on a range of privacy matters.

Main Accountabilities:

1. Provide expert and strategic legal advice regarding privacy matters, including applicable regulatory updates, to management, the GDPO, and senior leaders.
2. Draft, negotiate, and advise on data privacy clauses for various commercial agreements.
3. Lead complex privacy reviews and negotiations, liaising with multiple business functions as appropriate.
4. Draft and advise on complex data protection-related documentation, including privacy audit documentation, data flow diagrams, user journeys, and privacy impact assessments for technology use-cases involving large volumes of special category data.
5. Identify and advise on privacy risks within group operations.
6. Support the GDPO in implementing and maintaining the Group’s privacy program, including:

• Advising on ROPA requirements
• Supporting DSAR handling
• Reviewing legal risks in processing activities using the One Trust platform
• Advising on MI reporting and analytics activities