Legal Counsel – Data Lawyer – Senior Manager – Permanent – London

Overview

In this role you guide EY’s data strategy from a legal perspective, shaping how data is collected, governed and used commercially. You’ll advise on data protection, AI and data-driven products, partnering with cross-functional teams to enable compliant, value-driven offerings. Your work spans client and supplier contracts, data licensing and governance as EY expands data-enabled services. You’ll operate at pace in a fast-evolving regulatory landscape, delivering pragmatic, commercially-minded advice. This is a chance to impact EY-wide data initiatives within a supportive, high-caliber UK Legal team.

Pay / Benefits

• flexible working
• Total Rewards
• holidays
• health and wellbeing
• insurance
• savings and discounts

Responsibilities

• Advise on data protection, AI, and commercial use of data across client and supplier contracts, including processing, licensing, and AI-specific terms
• Support development of data-driven products and revenue streams with governance and ownership clarity
• Assist on AI-enabled products and data protection risk in international transfers and data incidents
• Draft and negotiate commercial contracts (MSAs, Global Framework Agreements, complex data/AI deals) and technology agreements including SaaS and GenAI
• Provide legal guidance to firm service lines and internal functions (real estate, procurement, IT, finance, etc.) and lead firm-wide projects as needed
• Contribute to broader data and commercial contracting work within the Commercial Team

Key requirements

• 8+ years’ PQE with substantial data protection, AI, or data commercial experience
• In-house experience with UK data law and strong academic/professional credentials
• Proven data protection advisory experience (UK GDPR, international transfers, breach response) and interest in AI/GenAI law
• Commercially aware with decisive, pragmatic advice under evolving regulatory conditions
• Calm under pressure with strong negotiation, stakeholder management and communication skills
• Accountability, trust and results-focused mindset

• strong negotiation
• stakeholder management
• clear communication
• data protection (UK GDPR, international transfers, breach response)
• AI / GenAI law
• data governance and licensing

…