Data Privacy & Cybersecurity Associate in Cardiff

Browne Jacobson is proud to have been awarded National Law Firm of the Year in the Chambers & Partners Awards 2025 last year and also is fast growing with revenue growth of 16% over its last financial year, as published in its 2024/25 annual results.

With offices in Birmingham, Cardiff, Dublin, Exeter, London, Manchester and Nottingham, we’re a UK & Ireland based law firm with an international reach. Our key industry sectors include: technology, health/life sciences; real estate and construction; education; energy and infrastructure; financial services; government; insurance; manufacturing and industrials; and retail, consumer and logistics.

Our firm has also been one of the leaders in adopting AI technology and we announced early on, last year, that we had invested in Legora, one of the two leading legal industry tools (along with Harvey) to drive innovation in legal service delivery. As part of this, we are investing heavily in training our lawyers and operations teams to leverage Legora (and comparable technologies) to innovate and develop new digital solutions and AI-related tools, products and services to optimise client service delivery and deliver service excellence.

We are recruiting for an Associate to join our Data, Privacy & Cybersecurity team. In this role, you will play a key role advising clients across diverse sectors on UK and EU data protection regulations, providing clear, pragmatic and operationally focused guidance. You will develop and support the implementation of data protection policies, conduct DPIAs and TRA/TIAs, manage compliance initiatives, and help create robust privacy frameworks.

Your responsibilities include drafting, reviewing, amending and negotiating data-related contracts, agreements and commercial documentation. You will assist with both straightforward and complex Data Subject Access Requests, as well as automated decision-making request projects. The role involves handling complex data protection matters, including strategic and programmatic work and emerging legal issues relating to advanced technologies such as AI.

You will conduct risk assessments for innovative technologies, including profiling, biometrics and AI-driven systems, and demonstrate an understanding of international data transfer rules and regulations. You will prepare and support the drafting of estimates, scopes and assumptions, and contribute to the supervision of Corporate Due Diligence where required. Supporting organisations in responding to cyberattacks and personal data breaches is also a crucial part of your remit.

You should have experience working in a leading data protection team and up-to-date knowledge of UK and EU data protection law, including GDPR and related regulatory frameworks such as the EU Data Act, UK DPA, Data (Use and Access) Act, ePrivacy and associated cybersecurity.

Proven experience advising on and supporting a broad range of data protection matters across multiple sectors is essential. You should possess knowledge of freedom of information law and EIR regulations, excellent drafting, analysis and communication skills, and familiarity with emerging technologies including AI, digital risk frameworks and associated regulatory challenges.

If you are passionate about data, privacy, cybersecurity, emerging technologies and digital innovation (and how our work helps to shape society and reflect human values), and want to be part of a dynamic team, we would love to hear from you.