Privacy Lawyer

In-House Privacy & Data Protection Lawyer Hybrid - 2 days per week on site in Lancashire A well-established and highly collaborative in-house legal team is looking to appoint a privacy and data protection lawyer to take a leading role in shaping and delivering the organisation's privacy compliance strategy across the UK and Europe. This is a genuinely broad and hands-on role within a business that values pragmatic legal advice, strong cross-functional relationships, and a calm, solutions-focused approach to risk. The legal function is known for being supportive, approachable, and embedded in the business rather than operating at arm's length. The role will suit a mid-level lawyer who wants to deepen their specialism in data protection while still maintaining exposure to commercial contracting and wider advisory work. You'll be trusted to take ownership of privacy matters, influence stakeholders, and help drive best practice across a fast-moving, commercially driven environment. You will lead on a wide range of privacy and data protection matters, including advising on GDPR and PECR compliance, supporting data protection impact assessments, and contributing to data mapping and risk mitigation activities. A key part of the role will involve drafting and negotiating data protection agreements, data-sharing arrangements, and privacy-related clauses across a variety of commercial contracts. Alongside your privacy focus, you'll also support the wider legal team on general commercial matters, including supplier agreements, frameworks, NDAs, amendments, and service contracts. You'll work closely with operational and product teams to ensure privacy is embedded into new initiatives from the outset, as well as helping to monitor regulatory developments and translate them into practical business guidance. There will also be opportunities to deliver training, build internal awareness of data protection obligations, and play a key role in developing efficient and scalable compliance processes. We're looking for a qualified solicitor with solid post-qualification experience in commercial law and data protection. You should have a strong working knowledge of GDPR and a confident, pragmatic approach to applying privacy principles in a commercial setting. The ability to balance risk with business needs is essential, as is the confidence to communicate clearly and build trusted relationships across the organisation. This is a flexible employer offering a friendly and well-established legal team, with a strong emphasis on work-life balance and supportive working culture. The role requires attendance on site in Lancashire two days per week, with the remainder of the week working remotely. For lawyers looking to specialise further in privacy and data protection within a commercially grounded in-house environment, this is an excellent opportunity to take the next step.