Canal & River Trust
Senior Data & Information Lawyer
How your CV stacks up
Upload your CV to see how well it fits this job role
?%
About the Trust
We're one of the UK’s biggest charities and we care for 2,000 miles of canals, rivers, docks and reservoirs because we believe life is better by water. We're looking for people who support our cause and want to make a difference for future generations. Could this be you?
Along with our waterways we also manage museums, archives and the country's third largest collection of historic buildings, as well as the nature and wildlife that calls our canals home. All of this enables us to provide wellbeing opportunities for millions of people each year.
Join Our Team: Senior Data & Information Lawyer
We’re excited to welcome a new Senior Data & Information Lawyer to join our Legal division.
Navigate your future and lock in your career as we keep our canals open and alive.
Working Hours & Location
This role follows 37 hours, Monday to Friday working pattern. The vacancy will be offered on a remote working basis, with a requirement to attend our main hub spaces as and when required.
Role Overview
The Senior Data & Information Lawyer acts as the Trust’s senior legal adviser on information governance, data protection, privacy, cyber security, AI, and information rights matters, providing strategic guidance to ensure compliance, minimise risk, and promote robust governance across the organisation.
Key Responsibilities
- Acting as the Trust’s senior legal adviser on information governance, data protection, privacy, cyber, AI and information rights law, including UK GDPR, Data Protection Act 2018, Freedom of Information Act 2000 and Environmental Information Regulations 2004.
- Advising the Trust, including senior leaders and directors, on complex information governance risk, statutory disclosure obligations, privacy compliance, data processing, data sharing, cyber incidents, AI adoption and regulatory exposure.
- Providing senior legal advice on data protection impact assessments, privacy-by-design, data processing agreements, data sharing agreements, controller/processor arrangements, joint controller arrangements, privacy notices and lawful use of personal data across Trust activities.
- Advising on AI, digital, cyber and information security matters, including privacy risks arising from new systems, AI-enabled tools, automated processing, data leakage, cyber incidents, emerging technology adoption and associated governance controls.
- Supporting the legal response to personal data breaches, cyber incidents, complaints, ICO enquiries, regulatory engagement and information rights challenges, ensuring proportionate and compliant handling.
- Advising on complex, sensitive or high-risk subject access requests, FOI requests, EIR requests, internal reviews, complaints and appeals, including application of exemptions, exceptions, redactions, disclosure risk and statutory decision-making.
- Supporting the Data Protection Officer and Information Governance team on regulatory compliance, risk escalation, statutory records, DPIAs, breach records, data sharing records, ICO correspondence and evidence of compliance.
- Supporting the development of governance frameworks, policies, procedures, templates and training to strengthen information governance compliance, improve consistency and reduce legal and regulatory exposure.
- Monitoring legislative, regulatory and technological developments in information governance, data protection, AI, privacy and cyber risk, identifying emerging risks and advising on implementation of required change.
- Providing legal advice on other information governance, privacy, cyber, AI and statutory disclosure matters affecting the Trust, as required.
Reasons to use Rodeo
Start with a chat, not a search bar
Grad scheme, placement, apprenticeship? Not sure what you want yet — that's fine. Your agent talks it through with you and turns "I have no idea" into a shortlist.
It searches the market for you
Every day your agent scans the market matching roles against what actually matters to you, not just keywords on a CV.
Only hits
No noise. No "maybe this fits." Just roles with a clear explanation of why they're right — and where to focus when applying.
About you
You are a qualified lawyer with significant experience in information governance, data protection, privacy and information rights law. Confident advising senior stakeholders, you bring strong knowledge of UK GDPR and related legislation, alongside experience managing complex compliance, disclosure, cyber and regulatory matters. You provide pragmatic, risk-based legal advice, work effectively under pressure, and are comfortable managing a varied caseload in a fast-paced environment.
Skills & Qualifications
- Qualified lawyer with significant experience, ideally 10+ years PQE or equivalent experience, in information governance, data protection, privacy and information rights law gained in private practice, public sector or in-house environments.
- Strong knowledge of UK GDPR, Data Protection Act 2018, Freedom of Information Act 2000, Environmental Information Regulations 2004 and associated regulatory guidance.
- Demonstrable experience advising on complex data protection, privacy, information rights, statutory disclosure, confidentiality and regulatory compliance issues.
- Experience advising on DPIAs, privacy-by-design, data processing agreements, data sharing agreements, controller/processor analysis, joint controller arrangements, privacy notices, records of processing and information governance frameworks.
- Experience advising on cyber incidents, personal data breaches, ICO engagement, complaints, regulatory investigations and information rights appeals.
- Experience supporting or advising a Data Protection Officer, Information Governance team or equivalent compliance function.
- Experience working within or advising a public sector, charity, infrastructure, regulated or public-facing organisation is desirable.
- Demonstrable experience advising senior leadership and operational teams on information governance risk and strategic implications.
- Ability to provide pragmatic advice and resolve complex legal issues in an operational environment.
- Ability to work autonomously, manage a wide and varied caseload and meet tight statutory and operational deadlines.
- Displays a can-do mentality and ability to work independently while contributing effectively within a team.
- Comply with Canal & River Trust Health & Safety policy and defined standards, report incidents, accidents and near misses. Assess risks and make adjustments to work methods where appropriate. Ensure all equipment, PPE, plant and materials are appropriate for the task. Consider your own and others’ behaviour.
Get help with your application
Your very own career expert that helps elevate your application to the next level.
We reserve the right to close this vacancy early if we receive sufficient suitable applications for the role. Therefore, if you are interested, please submit your application as early as possible.
Contact & Application
If you have any questions, feel free to reach out to us at CRT.recruitment@canalrivertrust.org.uk. We encourage early applications as we may close the vacancy once we receive enough suitable candidates.
What We Offer
We offer an annual salary of £68,000. Enjoy a competitive pension scheme, increasing holiday entitlement, and a range of employee benefits. For a full breakdown of our benefits, check out our brochure here: EVP - 1. Learn more: https://canalrivertrust.org.uk/about-us/work-for-us/our-benefits
INDHP
Our values
We care passionately for our waterways, and as importantly, for those who look after and use them. We are committed to building a diverse and inclusive workforce where everyone can thrive. We are striving to represent the diverse communities that we are a part of and welcome applicants from across all sectors of the community.
We want everyone to have the opportunity to perform at their best during our recruitment process. If you require any reasonable adjustments - whether for a disability, neurodiversity, or health condition - please let us know what you need and how we can support you. We’ll work with you to make any necessary changes.
All of our jobs can be considered on a part time, flexible or job share basis.
We operate a Guaranteed Interview Scheme for disabled applicants who meet the minimum criteria for the role. You are considered disabled under the Equality Act 2010 if you have a physical or mental impairment that has a substantial and long-term negative effect on your ability to carry out normal day-to-day activities. We recognise not everyone who is classified as disabled under the Equality Act personally identifies this way, or with this definition of disability. Please do not let this discourage you from applying under the scheme.
At Canal & River Trust, we are committed to fair, transparent, and ethical recruitment practices. As part of our hiring process, we may use AI to analyse applications and support us work more efficiently. However, all hiring decisions – without exception - are made by our hiring managers.
Navigate your future and lock in your career as we keep our canals open and alive.
Find out more about us on our website: https://canalrivertrust.org.uk/about-us
“It took my CV and asked me questions relevant to understanding what kind of jobs to suggest for me. Suggestions were almost perfect. Jobs were exactly what I’ve been looking for.”
Jessica, London
Skills
Location