Policy/GDPR Lawyer
Hays · Southwark, England ·
Reference: 4806472Job ID: 5399924Posted: 2026-06-17Closing date: 2026-09-15Location: LondonSalary: 64400 (per annum)Job type: PermanentWorking pattern: Full time / Flexible workingIndustry: Legal / In-house LegalCompany: HaysConsultant: Lucy KellyHays office: London-City — 5th Floor, 107 Cheapside,Phone: 02034650141Email: lucy.kelly@hays.comYour new companyA respected UK public‐interest regulator is seeking a Policy & Data Protection Lawyer to join its Enforcement Division.
The organisation operates in a complex investigative environment where the lawful handling of sensitive information is critical. You'll be joining a multidisciplinary team of around 60 professionals, all working to uphold high standards of integrity and accountability.
Your new roleThis is a Level 3 position for a technically strong, self‐sufficient lawyer with hands‐on GDPR and data protection experience in a litigation, regulatory or enforcement setting. You will act as the division's sole dedicated data protection specialist, supporting the Information Asset Owner and senior leadership on all matters relating to data governance, compliance and policy.
Your work will include: Providing day‐to‐day legal advice on UK GDPR, the Data Protection Act, FOIA and related frameworksSupporting enforcement investigations with expert guidance on data handling, disclosure, confidentiality and riskUpdating and maintaining internal data management policies and proceduresAdvising on and preparing DPIAs, LIAs and data‐related risk assessmentsInvestigating and advising on data breachesPreparing reporting documentation and supporting routine administrative governance tasksWorking autonomously with supervision from a Senior Policy LawyerEngaging with internal case teams, senior management and external bodies where requiredContributing to training and knowledge‐sharing across the divisionWhat you'll need to succeedYou will thrive if you bring: Qualification as a solicitor or barrister in England & Wales (or a comparable common law jurisdiction)2–5 years'+ PQE with strong, practical GDPR/DP experienceExperience advising in a regulatory, enforcement, litigation or public‐sector investigations contextThe ability to work autonomously, apply sound legal judgement and handle technical issues confidentlyStrong academics and excellent analytical skillsComfort with both high‐level advisory work and routine governance tasksThe ability to quickly grasp new issues and operate in a fast‐moving environmentStrong communication skills and confidence engaging with senior stakeholdersWhat you'll get in returnA rare opportunity to shape data protection practice within a high‐profile enforcement environmentExposure to senior leadership and complex, sensitive investigationsA supportive team structure with autonomy and room to growHybrid working (up to 60% remote)A collaborative, mission‐driven cultureClear development pathways and access to specialist trainingWhat you need to do now If you're interested in this role, click 'apply now' to forward an up-to-date copy of your CV, or call us now.
If this job isn't quite right for you but you are looking for a new position, please contact us for a confidential discussion on your career. #4806472 - Lucy Kelly