Data Protection Lawyer (Junior) | London | In-house
The opportunity
A leading international hospitality and lifestyle group is looking for a junior data protection lawyer to join its in-house legal team in London. The business operates across multiple brands and markets, and handles significant volumes of guest, member, employee and marketing data. This is a chance to build a specialist privacy career inside a fast-growing, brand-led business, with real exposure and early responsibility.
You will work closely with senior legal counsel and with colleagues in marketing, technology, HR and operations. This is a varied role, with plenty of hands‑on advisory work rather than pure compliance administration.
Key responsibilities
- Advise the business on day-to-day UK GDPR, Data Protection Act 2018 and PECR queries, including the Data (Use and Access) Act 2025 changes
- Support on data subject access requests and other individual rights requests
- Draft and negotiate data processing agreements, data sharing agreements and the data protection provisions in commercial contracts
- Carry out and maintain DPIAs, legitimate interests assessments and records of processing
- Support on international data transfers, including transfer risk assessments and the use of the UK IDTA and addendum
- Assist with data breach assessments, response and regulator notifications
- Help deliver training and guidance to the wider business
- Keep up to date with regulatory developments, including ICO guidance and enforcement trends, and translate these into practical advice
About you
- Qualified solicitor in England & Wales, ideally 1-3 years' PQE (NQs with strong privacy experience or a relevant training seat will also be considered)
- Experience of data protection and privacy work gained in a law firm or in-house
- Solid working knowledge of UK GDPR and the DPA 2018, with an understanding of EU GDPR
- Commercial and pragmatic, able to give clear, practical advice to non-lawyers
- Strong drafting skills and attention to detail
- Comfortable managing a varied workload and working independently when needed
- Genuine interest in consumer-facing, brand-led businesses
- Any privacy certification (such as CIPP/E) or experience in hospitality, retail, consumer or technology is a bonus
What's on offer
- A competitive salary and benefits package
- Hybrid working, based in London
- Exposure to a global, multi-brand business and a collaborative in-house legal team
- Clear development opportunities, with the chance to broaden into wider commercial and technology work
- Discounts and perks across the group's brands
Junior privacy lawyer @ hospitality group employer: Heriot Brown In-House Legal Recruitment
Heriot Brown In-House Legal Recruitment offers a dynamic and supportive work environment for the Head of Legal & Commercial Strategy role, where you will lead a talented legal team in a thriving UK consumer business. With a strong emphasis on professional development, employees benefit from tailored growth opportunities and a collaborative culture that values innovation and strategic thinking. Located in a vibrant area, the company also provides competitive remuneration and a comprehensive benefits package, making it an excellent choice for those seeking meaningful and rewarding employment.
Contact Details:
Heriot Brown In-House Legal Recruitment Recruitment Team
