Data Protection Lawyer

About the Role

Our client, a dynamic organisation with headquarters in Edinburgh , is seeking a knowledgeable Data Protection Lawyer to lead its privacy compliance efforts. This role is critical in ensuring the organisation adheres to GDPR, UK data protection laws, and other relevant privacy regulations across its operations. You will be responsible for advising on data processing activities, drafting policies, managing data breaches, and conducting privacy impact assessments. This is a unique opportunity to shape and implement data privacy strategies within a forward-thinking company, fostering a culture of privacy awareness and compliance throughout the business, with the flexibility of a hybrid working model from our Edinburgh base.

Key Responsibilities

• Advise on all aspects of data protection law, including GDPR and UK GDPR compliance.
• Develop and implement data protection policies, procedures, and training programs.
• Conduct Data Protection Impact Assessments (DPIAs) for new projects and processing activities.
• Manage and respond to data subject access requests (DSARs) and data breaches.
• Review and advise on data processing agreements (DPAs) with third-party vendors.

Requirements

• Qualified solicitor with a strong focus on data protection and privacy law, with at least 5 years' experience.
• In-depth knowledge of GDPR, UK Data Protection Act, and related privacy regulations.
• Experience in conducting DPIAs and managing data breach responses.
• Excellent understanding of data processing operations and IT security principles.
• Strong communication and interpersonal skills to advise stakeholders at all levels.

Benefits

• Competitive salary and attractive benefits package.
• Opportunity to work in a high-impact role with significant autonomy.
• Support for professional development and CIPP/E certification.
• Hybrid working arrangement promoting work-life balance in Edinburgh .
• Be a key player in shaping the company's privacy framework.