Data Privacy Officer

3 weeks ago

London, United Kingdom Charles Russell Speechlys Full time

Location

London

Category

Contract type

Permanent - Full Time

Salary

Competitive

Working hours

Full Time

**Data Privacy Officer**:
The Compliance and Risk (C&R) Team is based in London and led by the firm’s General Counsel, to whom this role will report.

The C&R Team advises the firm on all aspects of its legal and regulatory duties, including financial crime compliance, SRA STaRS, risk management, client engagement terms, complaints and claims, internal investigations, insurance, governance, external vendor contracts and data privacy. The legal team currently comprises 9 lawyers and 2 paralegals.

As part of that team, this role would involve advising internally on the firm’s own data privacy compliance; it would not involve advising clients of the firm although it may require liaison with clients and former clients, e.g. in respect of DSAR and file transfer requests.

This post is being advertised in anticipation of the retirement of the firm’s current data privacy offer in spring 2024 and due to expanding demand for data privacy and data governance advice within the firm. It is anticipated that the data privacy officer will be assisted by a paralegal and by other members of the C&R Team on an ad hoc basis if required.

Roles and Responsibilities
- Providing timely, accurate, and practical legal advice on all aspects of data protection and privacy to the firm.
- Ensuring that data protection is built into all relevant activities relating to the processing of personal data (data protection by design)
- Maintaining and advising on a privacy governance framework to manage data use in compliance with:

- (2) the firm’s regulatory obligations in respect of client confidentiality. Liaising with local counsel as required to implement effective data privacy compliance in the firm’s non-UK offices, especially in the Middle East and Asia.
- Working with key internal stakeholders in the review of projects and other relevant activities to ensure compliance with local data privacy laws, and where necessary, complete and advise on privacy impact assessments and other risk assessments.
- Maintaining a record of processing activities and with other stakeholders determining, justifying and documenting the lawful basis for the processing.
- Serving as the primary point of contact and liaison for the SRA, ICO and other Data Protection Authorities on all data protection related matters under the UK and EU GDPR.
- Ensuring that all necessary registrations are in place.
- Serving as the primary point of contact for dealing with:

- Data Subjects exercising their rights, including DSARs and erasure requests
- Incidents and data breaches
- Transfers of client data externally and/or internationally
- Advising on onward transfers of client files (e.g. with departing Partners) and client file access requests; supervising production of files to be sent externally for these purposes.
- Reviewing vendor contracts and consents needed to implement projects in partnership with the firm’s Procurement and Information Security functions.
- Developing strategies and initiatives to ensure engagement with key internal and external stakeholders and arrange audits as appropriate.
- Conducting comprehensive risk assessments to identify potential data protection vulnerabilities.
- Collaborating with the Information Security function to maintain records of all data assets and exports and maintaining a data security incident management plan to ensure timely remediation of incidents including impact assessments, security breach response, complaints, claims or notifications and responding to DSARs.
- Ensuring that the firm’s IT systems and procedures comply with all relevant data privacy and protection law, regulation and policy (including in relation to the retention and destruction of data) including in particular that appropriate technical and organisational security measures are in place to protect personal data of clients and others.
- Contributing to the mission of the wider C&R team to ensure we follow best practice and protect the firm from reputational and financial loss.

Qualifications and Experience
- Qualified lawyer, ideally a UK solicitor but other common law jurisdictions or EU jurisdictions may be acceptable
- As a guide, 8+ years PQE experience with a significant part of that focused on data privacy
- Ideally, a data protection/privacy qualification such as CIPP
- Experience in advising on compliance policies, intra-group and international data transfers, contractual data protection requirements, data breach incidents and DSARs is essential
- Experience of data governance design and implementation
- Some line management experience as the role may involve supervising a paralegal

Person Specification
- Strong knowledge of UK and EU data privacy and data protection laws, and a reasonable understanding of other major privacy frameworks and evolving legislation worldwide.
- Understanding of SRA regulatory requireme

  • Data Privacy Governance Officer

    1 day ago

    London, United Kingdom Barclays Full time

    **Data Privacy Governance Officer** **London** As a Barclays Data Privacy Governance Officer, you will be backing Data Privacy management, advisory and governance activity across the Corporate Investment Bank. Within this role, you will assist the Data Governance Managers and work closely with Data Privacy stakeholders across the business to help strengthen...

  • Data Privacy

    1 month ago

    London, Greater London, United Kingdom Douglas Scott Legal Recruitment Full time

    A Top 100 UK law firm, renowned for its excellence in technology, data, and media law, is currently seeking an experienced Data Solicitor with 4-8 years PQE to join its accomplished team in London.As a Data Solicitor, you will play a pivotal role in contributing to the firm's reputation for delivering innovative and strategic legal solutions to clients in...

  • Group Data Protection Officer

    1 day ago

    London, United Kingdom Data Idols Full time

    **Group Data Protection Officer**: **Salary: £100,000 to £110,000**: **Location: London - 2 days per week**: - We are currently looking for a Group Data Protection Officer to join one of the UK’s best-known brands and consumer platforms.**The Opportunity**: Data Idols is working with one of the UK’s best-known household brands that enables their...

  • Privacy Officer

    4 weeks ago

    London, United Kingdom Kingfisher Full time

    Overview: We’re Kingfisher. You might know us as B&Q, Screwfix, Castorama, Brico Depot or Koçtaş. We’re made up of over 78,000 passionate people, call over 1,300 stores home and operate in 8 countries. That’s right, we’re big, but we have ambitions to become even bigger and even better. We want to become the leading home improvement company and...

  • Data Privacy Analyst

    3 days ago

    London, United Kingdom Corporation Service Company Full time

    Data Privacy Analyst Remote Monday through Friday 8:00 . to 5:00 . Candidates for this position must be eligible to work without sponsorship. Time on-site or time zone may be necessary based on business need. Summary: As a Data Privacy Analyst, you will play a crucial role in ensuring the protection and compliance of personal data within our...

  • Privacy Officer

    4 weeks ago

    London, United Kingdom Southern Housing Full time

    Role: Privacy Officer Advert Closing: 10/03/2023 **Salary**: £32,000 per annum **Location**: Fleet House, Farringdon/ Building 300, Kent Science Park Contract type: Permanent Hours: 35 hours per week At Southern Housing, our residents are at the heart of everything we do. As one of the largest housing providers in the UK with over 77,000 homes across...

  • Associate - Data Privacy

    4 days ago

    London, United Kingdom JMC Legal Recruitment Full time

    Are you a talented Data Privacy Associate with 5-8 years PQE, looking to join a large, progressive Data Privacy team? Progress your legal career in this Top 15 US law firm, best known for big-ticket transactional work in the upper market. The Firm They stand as one of the globe's most formidable integrated legal firms, dedicated to offering insights...

  • Data Privacy

    1 month ago

    London, Greater London, United Kingdom MAP Legal Recruitment Full time

    Data Privacy & Cybersecurity Associate 2-4 PQEWe are instructed by an international law firm in London that is seeking to recruit a Data Privacy and Cybersecurity Associate to join their team in London.The team advises on information law and cyber security both in the Uk and on international projects. They advise on the full spectrum of data protection...

  • Data Privacy Strategist

    4 days ago

    London, United Kingdom Slalom Full time

    Data Privacy & Governance StrategistWe have a question for you - and it’s something we’re really passionate about. Can you imagine a world in which you can truly love your life and your work? Well, we have some good news – creating that world and making this vision a reality is what we get out of bed for, it’s our north star.But what do we really...

  • Data Privacy Analyst

    3 weeks ago

    London, United Kingdom CMC Markets Full time

    Since launching in 1989, CMC Markets has become one of the world's leading online CFD and financial spread betting providers executing millions of retail customer trades annually across UK, Europe, Asia Pacific and North America. CMC Markets’ success is founded on its ability to deliver a wide range of trading products to customers through its in-house...

  • Data Privacy Lawyer

    5 days ago

    London, United Kingdom Graff Search Full time

    About the Company Fantastic opportunity to work for a major retail and consumer organisation in London. The firm operates across a number of sectors, including retail and consumer, whilst being heavily invested in new technologies such as AI, ad-tech and machine learning. The Opportunity - Senior Data Privacy Counsel This position would suit a Data...

  • EMEA Data Privacy AVP

    1 week ago

    London, United Kingdom Goodman Masson Full time

    Responsibilities (brief): This position will primarily support the data privacy team and the Data Protection Officers in the region on data privacy and protection and cross-border data movement (CBDM) matters, particularly in the context of a number of offshoring / outsourcing initiatives. The position will also help support the several regional Data...

  • EMEA Data Privacy AVP

    2 weeks ago

    London, United Kingdom Goodman Masson Full time

    Responsibilities (brief): This position will primarily support the data privacy team and the Data Protection Officers in the region on data privacy and protection and cross-border data movement (CBDM) matters, particularly in the context of a number of offshoring / outsourcing initiatives. The position will also help support the several regional Data...

  • Data Privacy Director

    2 days ago

    London, United Kingdom Sage City Full time

    Job Description Are you passionate about data privacy and protection strategies? Do you thrive in leading high-performing teams towards compliance excellence? If so, we have an exciting opportunity for you! We are seeking a skilled Data Privacy Director to join The Sage Group plc and its subsidiaries. In this role, you will be entrusted with spearheading...

  • Data Privacy Director

    1 month ago

    London, United Kingdom Sage City Full time

    Job Description Are you passionate about data privacy and protection strategies? Do you thrive in leading high-performing teams towards compliance excellence? If so, we have an exciting opportunity for you! We are seeking a skilled Data Privacy Director to join The Sage Group plc and its subsidiaries. In this role, you will be entrusted with spearheading...

  • Data Privacy Manager

    2 days ago

    London, United Kingdom Oakleaf Partnership Limited Full time

    Data Privacy ManagerCheck out the role overview below If you are confident you have got the right skills and experience, apply today.Location: London, HybridDuration: 6-month initial contract with extensionsStart Date: ASAPCompany Overview: Join one of the world's leading financial services organisations and play a pivotal role in safeguarding data privacy...

  • Data Privacy Manager

    5 days ago

    London, United Kingdom Oakleaf Partnership Limited Full time

    Data Privacy Manager Location: London, Hybrid Duration: 6-month initial contract with extensions Start Date: ASAP Company Overview: Join one of the world's leading financial services organisations and play a pivotal role in safeguarding data privacy and protection. With a global presence and a commitment to innovation and excellence, our company...

  • Data Privacy Manager

    3 days ago

    London, United Kingdom Oakleaf Partnership Limited Full time

    Job DescriptionData Privacy ManagerLocation: London, HybridDuration: 6-month initial contract with extensionsStart Date: ASAPCompany Overview: Join one of the world's leading financial services organisations and play a pivotal role in safeguarding data privacy and protection. With a global presence and a commitment to innovation and excellence, our company...

  • Data Privacy Manager

    4 days ago

    London, United Kingdom Oakleaf Partnership Limited Full time

    Data Privacy Manager Location: London, Hybrid Duration: 6-month initial contract with extensions Start Date: ASAP Company Overview: Join one of the world's leading financial services organisations and play a pivotal role in safeguarding data privacy and protection. With a global presence and a commitment to innovation and excellence, our company...

  • Data Privacy Manager

    4 days ago

    London, United Kingdom Oakleaf Partnership Limited Full time

    Data Privacy ManagerCheck out the role overview below If you are confident you have got the right skills and experience, apply today.Location: London, HybridDuration: 6-month initial contract with extensionsStart Date: ASAPCompany Overview: Join one of the world's leading financial services organisations and play a pivotal role in safeguarding data privacy...