Data Privacy Lawyer

As a data privacy lawyer, you will play a critical role in managing and minimizing privacy risks across the organization while ensuring compliance with global privacy laws across DET. The role is suited to a junior legal professional with experience in data protection, regulatory compliance, and advisory work, who will support privacy requirements for organizational projects in collaboration with business and technical stakeholders.

You will contribute to the development and implementation of privacy policies, procedures, processes, and programs to maintain regulatory compliance.

Key Responsibilities

• Privacy Risk Management:
• Identify, assess, document, and track privacy risks, providing legal and practical recommendations aligned with Privacy by Design and Privacy by Default principles. Support the maintenance of the Privacy Risk Register.
• Data Inventory & Records of Processing:
• Support the documentation and maintenance of personal data inventories and Records of Processing Activities (RoPA) in coordination with business stakeholders, ensuring alignment with applicable legal requirements.
• Regulatory Impact Analysis:
• Monitor and analyze changes in global privacy and data protection regulations (e.g., GDPR, local data protection laws), and support updates to internal policies, procedures, and guidance accordingly.
• Legal & Policy Support:
• Assist in drafting, reviewing, and updating privacy policies, notices, internal guidelines, and contractual clauses related to data protection.
• Data Subject Rights Support:
• Support the handling of Data Subject Access Requests (DSARs) and other data subject rights requests, including legal assessment, response drafting, and coordination with relevant stakeholders.
• Advisory Support to Projects:
• Provide legal privacy input to strategic and operational projects, including conducting or supporting Privacy Impact Assessments/Data Protection Impact Assessments (PIAs/DPIAs).

Essential Requirements

Experience:

• 2–3 years of experience as a junior lawyer or legal counsel, either in-house or within a law firm, with exposure to data protection, privacy, regulatory compliance, or technology law.
• Practical experience supporting a data privacy office, legal, compliance, or risk function within a large or complex organization.

Education:

• Bachelor’s degree in law (LLB or equivalent).
• Legal Skills & Knowledge:
• Solid understanding of data protection and privacy laws (e.g., GDPR and comparable international frameworks).
• Experience drafting and reviewing legal documents such as policies, notices, internal guidance, and compliance documentation.
• Ability to translate legal requirements into clear, practical guidance for non-legal stakeholders.
• Certifications:
• Privacy-related certifications such as CIPP/E are advantageous but not mandatory.

Preferred Experience

• Supporting or conducting Privacy Impact Assessments / Data Protection Impact Assessments (PIAs/DPIAs).
• Experience advising on data sharing arrangements, vendor engagements, and privacy clauses in contracts.
• Exposure to regulatory inquiries, internal audits, or compliance reviews related to data protection.
• Preparing written briefings, summaries, and reports on privacy risks and compliance matters for management.

This role offers a strong opportunity for a junior legal professional to deepen their expertise in data privacy within a dynamic, international environment while contributing to robust and practical privacy compliance across DET.