At a Glance
- Tasks: Provide legal advice on GDPR and data protection, supporting investigations and policy updates.
- Company: Respected UK public-interest regulator with a focus on integrity and accountability.
- Benefits: Hybrid working, supportive team, clear development pathways, and access to specialist training.
- Other info: Autonomy in a dynamic environment with opportunities for professional growth.
- Why this job: Shape data protection practices in a high-profile enforcement environment and engage with senior leadership.
- Qualifications: Qualified solicitor or barrister with 2-5 years' experience in GDPR and data protection.
The predicted salary is between 50000 - 60000 £ per year.
A respected UK public‐interest regulator is seeking a Policy & Data Protection Lawyer to join its Enforcement Division. The organisation operates in a complex investigative environment where the lawful handling of sensitive information is critical. You'll be joining a multidisciplinary team of around 60 professionals, all working to uphold high standards of integrity and accountability.
This is a Level 3 position for a technically strong, self‐sufficient lawyer with hands‐on GDPR and data protection experience in a litigation, regulatory or enforcement setting. You will act as the division's sole dedicated data protection specialist, supporting the Information Asset Owner and senior leadership on all matters relating to data governance, compliance and policy. Your work will include:
- Providing day‐to‐day legal advice on UK GDPR, the Data Protection Act, FOIA and related frameworks
- Supporting enforcement investigations with expert guidance on data handling, disclosure, confidentiality and risk
- Updating and maintaining internal data management policies and procedures
- Advising on and preparing DPIAs, LIAs and data‐related risk assessments
- Investigating and advising on data breaches
- Preparing reporting documentation and supporting routine administrative governance tasks
- Working autonomously with supervision from a Senior Policy Lawyer
- Engaging with internal case teams, senior management and external bodies where required
- Contributing to training and knowledge‐sharing across the division
You will thrive if you bring:
- Qualification as a solicitor or barrister in England & Wales (or a comparable common law jurisdiction)
- 2-5 years'+ PQE with strong, practical GDPR/DP experience
- Experience advising in a regulatory, enforcement, litigation or public‐sector investigations context
- The ability to work autonomously, apply sound legal judgement and handle technical issues confidently
- Strong academics and excellent analytical skills
- Comfort with both high‐level advisory work and routine governance tasks
- The ability to quickly grasp new issues and operate in a fast‐moving environment
- Strong communication skills and confidence engaging with senior stakeholders
A rare opportunity to shape data protection practice within a high‐profile enforcement environment. Exposure to senior leadership and complex, sensitive investigations. A supportive team structure with autonomy and room to grow. Hybrid working (up to 60% remote). A collaborative, mission‐driven culture. Clear development pathways and access to specialist training.
Policy/GDPR Lawyer in London employer: Hays Specialist Recruitment Limited
As a respected public-interest regulator, this organisation offers an exceptional work environment for a Policy/GDPR Lawyer, characterised by a collaborative and mission-driven culture. Employees benefit from hybrid working arrangements, clear development pathways, and the opportunity to engage with senior leadership on complex investigations, all while contributing to the vital field of data protection and compliance.
Contact Details:
Hays Specialist Recruitment Limited Recruitment Team
