Data Protection Specialist in Oxford

We're recruiting for a data protection specialist to be a trusted advisor on data protection, working across the firm to solve complex issues, manage risk and support colleagues with practical, business-focused guidance.

The role provides specialist data protection support across the firm, with particular responsibility for supplier management, client-side contract support, data protection auditing and reporting, regulatory queries, incidents and internal stakeholder advice. The role works closely with the wider data protection team and supports the firm in maintaining robust, pragmatic and risk-based data protection practices. This role can be based in any of our regional offices.

The successful candidate will have strong technical data protection knowledge and the confidence to apply it in a pragmatic, risk-based way in a professional services environment. They will be able to advise a range of internal stakeholders on UK GDPR, data subject rights, incidents, supplier and client-side data protection requirements, and broader governance obligations. Given the responsibilities of this role, it is likely that your background and experience will include:

• Knowledge of UK GDPR, Data Protection Act 2018 and related regulatory guidance, with the ability to translate legal and regulatory requirements into practical business advice.
• Self-managed and confident in setting and prioritising their own work agenda.
• Excellent written and verbal communication skills and can convey complex matters clearly to different audiences.
• Confident in building sustainable relationships with clients, lawyers, partners and internal colleagues.
• Organised and methodical in their approach to work.
• Excellent attention to detail.
• A team player and willing to take on new responsibilities and challenges.

The activities include:

• Responding to data incidents (immediate response; drafting ICO notification; drafting data subject notifications; identifying clients to be notified).
• Responding to regulatory queries.
• Responding to complaints with data aspects.
• Reviewing and negotiating data protection provisions in supplier and third-party contracts.
• Reviewing supplier and third-party responses to data protection questions during the procurement process.
• Checking supplier and third-party sub-processors for issues.
• Taking responsibility for data protection content in letters of engagement and terms and conditions.
• Reviewing bespoke client contracts and terms.
• Maintaining records of data protection clauses with clients, including notification obligations and timescales and liaising with colleagues on AI-related contractual provisions where relevant.
• Conducting or procuring appropriate data protection auditing activity and working with the data protection team and other departments to implement resulting corrections.
• Supporting and contributing to other internal and external assurance frameworks.
• Reviewing and maintaining data protection content within the firm's risk register, identifying and escalating key data protection risks.
• Providing pragmatic, risk-based data protection advice to Marketing, the People team, investigations teams, fee earners and Partners.
• Supporting employee rights request responses, including reviewing disclosures and advising on exemptions where appropriate.
• Providing data protection input into internal investigations to support lawful handling, sharing and disclosure of personal data.

We reserve the right to close this vacancy early if we receive sufficient applications for the role. Therefore, if you are interested, please submit your application as early as possible.

As you'd expect, we offer a competitive salary and a wide range of benefits.

If we offer you a role, we will conduct comprehensive pre-employment screening. This screening will include, but is not limited to, a basic DBS, verification of your right to work, a three year employment history and a self-declaration to assess your character and suitability for the role.

Here at Mills & Reeve, we embrace the use of technology and AI and we recognise that candidates may use AI tools to support their applications. As a regulated industry, we expect candidates to use such tools responsibly, honestly and in a manner that allows us to make a fair and accurate assessment of their individual skills, experience and suitability for the role.

Mills & Reeve is centred on achieving more for clients, their businesses and the wider communities we serve. Our clients and their industries benefit from our knowledge and learning, and receive consistent experiences with no surprises. We build personal relationships, with advice individually tailored to individual need.

By joining Mills & Reeve, you'll have the chance to build your skills and experience within a firm that's not only ranked in the top 50 UK law firms, but also one that truly values their people.

Our values are the principles that help us fulfil our purpose:

• We're ambitious - We aim high, we embrace new ideas and we're passionate about our work.
• We're open - We communicate openly and honestly to build trust, and we do what's right.
• We care - We're committed to each other, our clients, our communities and the planet.
• We collaborate - We're easy to work with, we offer help willingly and we get things done – together.

We're committed to providing an inclusive and supportive working environment, are happy to consider flexible working arrangements, and want to achieve the right balance for both our people and the firm.