Data Protection Specialist

Overview

In this role you will act as a trusted data protection advisor across Mills & Reeve, focusing on supplier management, client-side contracts, audits, incidents, and regulatory queries. Reporting to the General Counsel, you will support robust, risk-based data protection practices and collaborate with the data protection team. The role is flexible location across regional offices and requires translating complex regulations into practical business guidance. You will engage with lawyers, clients and internal teams to protect personal data and enable compliant operations.

Pay / Benefits

• competitive salary
• wide range of benefits

Responsibilities

• Provide practical, risk-based data protection guidance across the firm to various departments
• Respond to data incidents, draft ICO notifications and data subject notices, and address regulatory queries and complaints involving data
• Review and negotiate data protection provisions in supplier/third-party contracts and procurement responses
• Take responsibility for data protection content in letters of engagement and client contracts, and maintain records of data protection obligations
• Conduct or facilitate data protection auditing activities and support internal/external assurance frameworks
• Maintain data protection content in the firm’s risk register and escalate key risks
• Offer data protection input to internal teams (Marketing, People, investigations, fee earners, Partners) and support employee rights responses
• Assist in internal investigations to ensure lawful handling and disclosure of personal data
• Refer to the full list of activities in the attached job description

Key requirements

• Strong knowledge of UK GDPR and Data Protection Act 2018 and related guidance
• Ability to translate regulatory requirements into practical business advice
• Self-managed with ability to prioritise work
• Excellent written and verbal communication to diverse audiences
• Strong relationship-building skills with clients, lawyers, partners and colleagues
• Organised, methodical and detail-oriented
• Team player willing to take on new responsibilities
• Experience advising on data protection across supplier and client contexts (preferred)

• effective communication
• relationship building
• attention to detail
• UK GDPR & Data Protection Act 2018 knowledge
• data protection auditing
• incident response and notification processes

…