Senior Privacy Lawyer

JR United Kingdom; Nottingham; Remote; GBP 50,000 - 80,000; Full time

Job summary

A leading HealthTech firm is seeking a Legal Advisor for a unique, fully remote, 12-month FTC position. The successful candidate will provide strategic advice on privacy matters, support data protection activities, and ensure compliance across the organization. This role presents an opportunity to work closely with senior leadership and various business functions on complex privacy issues.

Qualifications

• Provide expert legal advice on privacy matters.
• Draft and negotiate data protection clauses.
• Lead privacy reviews and manage legal risks.

Responsibilities

• Advise on regulatory updates and compliance.
• Draft privacy audit reports and documentation.
• Support the group's privacy program implementation.

Skills

Strategic legal advice

Privacy regulations knowledge

Negotiation skills

Risk assessment

Privacy impact assessments

Education

Law degree

Qualified solicitor

Tools

One Trust platform

Job description

Social network you want to login/join with:

This role is a unique, fully remote, 4-day-a-week, 12-month FTC position (salary is pro-rata) for a leading HealthTech firm.

Reporting to the Legal Director, this role will work closely with the Group Data Protection Officer and other compliance teams and senior personnel on a range of privacy matters.

Main Accountabilities:

1. Provide expert and strategic legal advice regarding privacy matters, including applicable regulatory updates, to management, the GDPO, and senior leaders.
2. Draft, negotiate, and advise on data privacy clauses for various commercial agreements.
3. Lead complex privacy reviews and negotiations, liaising with multiple business functions as appropriate.
4. Draft and advise on complex data protection documentation, including privacy audit reports, data flow diagrams, user journeys, and privacy impact assessments for technology use-cases involving large volumes of special category data.
5. Identify and advise on privacy risks within group operations.
6. Support the GDPO in implementing and maintaining the group's privacy program, including:

• Advising on ROPA requirements
• Supporting DSAR handling
• Reviewing legal risks in processing activities using the One Trust platform
• Advising on MI reporting and analytics activities