Senior Privacy Counsel

Central London | Hybrid, 3 days in the office

I’m working with a high-growth, technology-led business looking to appoint a Senior Privacy Counsel to take a leading role across its privacy programme.

You’ll have genuine ownership and autonomy, while working as part of a supportive and experienced Legal team, with senior lawyers around you to provide challenge, guidance, and development.

The business already has a privacy framework in place. The opportunity is therefore less about building a programme from scratch and more about taking ownership, improving what exists, and embedding privacy more effectively across a fast-moving organisation.

The Role

You’ll act as the principal day-to-day privacy lawyer for the business, working closely with Legal, Product, Engineering, Data, Marketing, and other commercial teams. The remit is broad and will include:

• Owning and developing the organisation’s privacy governance framework, including policies, RoPAs, privacy notices, retention, risk registers, and associated controls.
• Providing pragmatic legal advice on UK and European data protection law.
• Working closely with Product, Data, and Engineering teams to embed Privacy by Design and assess privacy risks associated with new products, technologies, and data uses.
• Drafting and negotiating DPAs, data-sharing agreements, and privacy provisions within commercial contracts.
• Advising on controller/processor arrangements, international transfers, and complex data-sharing issues.
• Taking ownership of DPIAs, LIAs, and other privacy assessments, with a focus on making processes proportionate and commercially workable.
• Supporting the business on marketing, advertising technology, profiling, consent, and the use of personal data for commercial purposes.
• Leading the privacy aspects of data incidents and breaches, including regulatory assessment and remediation.
• Overseeing and improving processes around DSARs and individual rights.
• Advising on the privacy implications of AI and emerging technologies, alongside broader digital regulation.
• Supporting privacy due diligence and integration activity associated with corporate transactions.
• Monitoring regulatory developments and translating them into practical changes across the business.
• Developing privacy training and helping build a culture where privacy is seen as an enabler rather than simply a compliance exercise.