LEGAL COUNSEL – DATA PROTECTION AND PRIVACY
3-6 MONTH FIXED TERM CONTRACT
FULLY REMOTE
Role Overview:
Morgan Philips Specialist Recruitment is presently representing a worldwide travel retail platform in their search for a Data Protection and Privacy Legal Counsel to join them for a period of 3-6 months and to provide additional legal capacity and overflow support to the Privacy Team during a period of increased demand.
Reporting to the Data Protection Officer and working closely with Legal Counsel - Data Protection and Privacy and the team’s paralegal, the successful candidate will provide practical, day-to-day legal support on privacy and data protection matters. This will include responding to routine business queries, supporting commercial and technology transactions, assisting with operational privacy compliance activities, and helping to manage a varied workload of privacy-related queries and projects across multiple jurisdictions.
The successful candidate will be expected to manage routine matters with an appropriate degree of independence, enabling senior members of the Privacy Team to focus on complex and priority matters. They will work collaboratively with colleagues and escalate complex, novel, sensitive or high-risk issues to senior members of the Privacy Team as appropriate. Support on general commercial and contractual matters may also be required.
Key Accountabilities:
- Act as a point of contact for routine privacy queries from internal stakeholders and provide clear, practical and timely advice. Provide practical, day-to-day legal advice and support on privacy and data protection matters across multiple jurisdictions, with a particular focus on compliance with the UK GDPR, EU GDPR and related legislation.
- Review, draft and negotiate privacy-related contractual provisions and documentation, including data processing agreements, data sharing agreements, standard contractual clauses and other international data transfer arrangements.
- Support customer, supplier and technology transactions by identifying relevant privacy risks and proposing practical, proportionate and business-focused solutions.
- Assist with the review, completion and maintenance of data protection impact assessments, transfer risk assessments and legitimate interests assessments.
- Work with internal stakeholders, including colleagues in the Commercial, Product, Technology, Marketing, Procurement, Cybersecurity and People teams, to support day-to-day privacy compliance requirements.
- Assist with data subject rights requests, privacy complaints and other operational privacy matters. Assist with the preparation, review and maintenance of privacy notices, policies, procedures, templates, guidance materials and other compliance documentation.
- Support privacy governance, risk management, compliance monitoring and internal reporting activities.
- Monitor relevant developments in privacy and data protection law and regulatory guidance and assist the Privacy Team in considering their potential impact on the business.
- Develop and maintain a strong working knowledge of relevant privacy laws, regulatory guidance and the company’s internal privacy policies and procedures, applying that knowledge when supporting and advising the business.
- Provide practical and clear guidance to internal stakeholders on contractual requirements, privacy risks and appropriate risk-mitigation measures.
- Support the wider Legal Team on general commercial and contractual matters where required.
- Manage competing priorities effectively and deliver work within agreed deadlines.
- Maintain clear records of advice, decisions and agreed actions where appropriate.
- Identify and promptly escalate complex, novel, sensitive or high-risk matters to the Data Protection Officer or Legal Counsel – Data Protection and Privacy, as appropriate. Work collaboratively with colleagues across the Legal Team and wider business and contribute positively to the company’s purpose, vision and values.
About You:
- A qualified lawyer in a common law jurisdiction.
- Approximately 2 - 3 years’ relevant post-qualification experience gained in a law firm, an in-house legal team or a combination of the two.
- Practical experience advising on privacy and data protection matters, including the UK GDPR and EU GDPR.
- Experience reviewing, drafting and negotiating data processing agreements, international data transfer arrangements and privacy-related contractual provisions.
- Experience supporting privacy compliance projects and responding to day-to-day privacy queries from business stakeholders.
- An understanding of the legal requirements relating to international transfers of personal data, including the use of standard contractual clauses and related transfer assessments.
- Experience of general commercial contract review, drafting and negotiation.
- Strong legal drafting, analytical and problem-solving skills.
- The ability to identify material privacy risks and propose proportionate, commercially practical solutions.
- Confidence in using existing templates, precedents, playbooks and escalation processes to progress routine matters efficiently and consistently.