Data Protection Manager

We are working with a leading UK litigation-only law firm to appoint a Data Protection Manager/Lawyer in London. Reporting to the Director of Regulatory Compliance and Data Protection Officer, you will support the firm’s data protection, regulatory compliance and risk management functions, with a particular focus on AI governance, confidentiality and professional conduct.

The firm is seeking an experienced data protection lawyer or privacy professional with managerial-level experience driving an organisational data protection programme. You will bring strong expertise in data breaches, subject rights requests, privacy risk assessments, contracts and regulatory compliance, alongside sound judgement, excellent communication skills and a proactive, pragmatic approach.

The responsibilities will include:

• Supporting the Data Protection Officer in delivering the firm’s data protection strategy and compliance programme.
• Maintaining records of processing activities, data inventories, registers, policies, notices and procedures.
• Managing data breaches, incidents, subject rights requests and regulatory risk assessments.
• Monitoring compliance, testing controls, identifying gaps, tracking improvement actions and reporting to relevant governance bodies.
• Advising on data minimisation, retention, secure deletion and UK GDPR and Data Protection Act 2018 requirements.
• Reviewing DPIAs, LIAs, international transfers, appropriate safeguards and Transfer Risk Assessments.
• Advising on supplier due diligence, commercial contracts, data processing arrangements and data sharing agreements.
• Delivering data protection training, guidance and compliance improvement initiatives.
• Advising on the responsible use of AI and emerging technologies, including related privacy, confidentiality and regulatory risks.
• Supporting AI governance, supplier assessments and control frameworks, including the interaction between AI, data protection and SRA obligations.
• Supporting client engagement, regulatory matters, audits, reporting, complaints, training and wider compliance projects.

This is an excellent opportunity to develop a broad data protection and AI governance practice within a highly respected law firm, working closely with senior stakeholders. Apply today with your CV and covering letter to register your interest.