Harbottle & Lewis
Data Protection Associate
Get notified of more jobs like this · No spam, ever
How your CV stacks up
Upload your CV to see how well it fits this job role
?%
The firm
We are a dynamic, multifaceted law firm that provides a wide range of legal services to a creative and entrepreneurial client base. We partner with the big and the small, from cutting-edge startups to global corporations, early-stage entrepreneurs to established industry leaders, and household names to private individuals and their family offices. We are renowned for our sector specialisms which we combine with expertise across all the traditional practice areas to provide our clients with tailored solutions that truly add value.
We offer a collegiate, vibrant and supportive environment, a clear path for career progression and a strong platform from which to learn and grow. We look for high-performing, committed and innovative people who aren’t afraid to push themselves to be the best they can be. We take an active role in helping our people be at the top of their game. We believe our people make us stand out and we empower them to meet their ambitions. We invest time in developing their skills and knowledge and run a number of development and training programmes throughout the year, as well as encouraging and supporting personal involvement in other areas of expertise.
The Group
Operating at the cutting edge of legal practice, the firm’s Media and Information Group (MIG) has a well-earned reputation and is a widely acclaimed leader in the field of information litigation with a fast-growing cyber and data practice.
Reasons to use Rodeo
Start with a chat, not a search bar
Grad scheme, placement, apprenticeship? Not sure what you want yet — that's fine. Your agent talks it through with you and turns "I have no idea" into a shortlist.
It searches the market for you
Every day your agent scans the market matching roles against what actually matters to you, not just keywords on a CV.
Only hits
No noise. No "maybe this fits." Just roles with a clear explanation of why they're right — and where to focus when applying.
Now, an exciting opportunity to join MIG has arisen as the Group is looking for a contentious Data Protection/Cyber Associate of 2-4 years PQE.
Get help with your application
Your very own career expert that helps elevate your application to the next level.
The successful candidate will support Partners and Senior Associates with advising clients dealing with urgent, complex, high-profile and often sensitive crisis matters across a range of information disputes, including cyber and data matters. The role is also suited to someone looking to diversify their practice and expertise into new areas in the information law space, such as defamation, malicious falsehood, misuse of private information, harassment and blackmail law in order to become a well-rounded information litigator.
Key Responsibilities
- Have 2-4 years PQE with a strong focus on cyber and contentious data protection matters.
- Demonstrate experience advising on the life cycle of cyber incidents, including high-pressured breach response and crisis management, including ransomware attacks, data breaches, D-DOS attacks, and hacks and providing associated legal and regulatory advice to client about compliance on calls and in writing.
- Advise on notification strategy and regulatory engagement, including corresponding with the ICO and advising on associated enforcement.
- Have knowledge of data protection legislation, including the UK GDPR and the Data Protection Act 2018, ICO guidance and relevant EU law and be able to give and coordinate pragmatic data protection advice alongside our data advisory team.
- Demonstrate experience advising on, defending and making subject access requests and other regulatory compliance matters.
- Have experience of and be comfortable handling long-tail contentious matters post breach for claimants and defendants, including information and data litigation, dispute resolution and legal proceedings, including data subject and related third-party claims arising out of incidents.
- Have experience with advising clients on breach preparation, breach simulations, communications support following a breach and working with trusted technical cyber partners.
- Be commercially minded, with the ability to provide pragmatic advice on risk management to a diverse client base and be comfortable with direct client contact.
- Have a genuine interest in the intersection of media and information law and a desire to develop and widen your practice in this area into new areas such as defamation, malicious falsehood, misuse of private information, harassment and blackmail law.
- Be a team player with strong communication and organisational skills, capable of working collaboratively and independently, with good attention to detail.
- Be keen on business development, making connections and presenting to clients or peers.
“It took my CV and asked me questions relevant to understanding what kind of jobs to suggest for me. Suggestions were almost perfect. Jobs were exactly what I’ve been looking for.”
Jessica, London
Location