{"id":1818261,"url":"https://alion.io/job/collinson-data-governance-privacy-enablement-counsel","title":"Data Governance, Privacy & Enablement Counsel","company":{"id":1593,"name":"Collinson","domain":"collinsongroup.com","url":"https://alion.io/company/collinson","size_band":"1001-5000","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Workday","truth_index":{"grade":"A","score":91,"open_postings":17,"ghost_share":0,"stale_share":0.176,"repost_share":0,"time_to_fill_p50_days":67,"computed_at":"2026-10-20T05:45:00Z"}},"role":"Legal","role_family":"Legal","seniority":"senior","employment_type":"full_time","work_mode":"hybrid","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["London, United Kingdom"],"countries":["GB"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":{"min_usd":92000,"max_usd":204000,"period":"year","method":"role_seniority_country_remote_cell","sample_n":43},"experience_years_min":5,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"GDPR","optional":false},{"name":"Machine Learning","optional":false}],"status":"live","first_seen_at":"2026-10-04T03:06:48Z","employer_posted_date":"2026-10-04","last_verified_at":"2026-10-18T16:52:22Z","board_verified":false,"closed_at":null,"days_open":17,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":17},"description":"Job Description\nThe Role\nThe role provides expert legal advice and strategic support on all aspects of data protection, privacy and information governance across the Group. The role ensures that the organisation's data strategy, governance framework and commercial initiatives are underpinned by robust legal and regulatory compliance while enabling the responsible and innovative use of data.\nAs a member of the wider legal team, working closely with the Data Enablement Officer, Data Protection, Information Security, Compliance, Technology and Business teams, the role embeds privacy by design, supports enterprise data governance, facilitates secure data sharing, and provides day-to-day legal advice on privacy and contractual data protection matters across our operating companies. The role acts as a trusted legal partner to the business, enabling commercial initiatives through practical, solutions-oriented advice.\nKey Responsibilities\nProvide legal support in the development and maintenance of the Group Data Enablement Framework.\nEnsure legal and privacy requirements are embedded within enterprise data governance standards, policies and processes.\nAdvise on accountability obligations, lawful processing principles and privacy-by-design requirements across data initiatives.\nSupport governance committees and decision-making forums on legal aspects of data management.\nReview, draft and negotiate contracts involving the processing or sharing of personal data.\nEnsure contractual arrangements appropriately allocate privacy obligations and regulatory responsibilities.\nProvide legal support on supplier, customer and technology agreements involving personal data.\nAct as the primary legal contact for operational data protection and privacy queries from business stakeholders.\nProvide timely advice on subject access requests, retention, lawful basis, marketing, customer complaints, employee data and operational privacy issues.\nSupport business projects by providing practical legal solutions to day-to-day data protection matters.\nProvide legal advice on new data flows, system integrations and enterprise data architecture initiatives.\nAdvise on privacy implications relating to data minimisation, purpose limitation, retention, security and lawful processing.\nReview new technologies and transformation programmes to ensure privacy risks are appropriately managed.\nAdvise on legal requirements relating to Records of Processing Activities (ROPAs), data inventories and data classification.\nSupport documentation of ownership, lawful basis, retention periods and processing purposes for key business data assets.\nEnsure accountability obligations under GDPR are appropriately embedded within enterprise data cataloguing initiatives.\nProvide legal advice on the lawful use of customer data for analytics, profiling, segmentation, AI and commercial initiatives.\nAdvise on consent requirements, legitimate interests assessments and direct marketing obligations.\nSupport responsible innovation while protecting customer rights and maintaining regulatory compliance.\nProvide privacy and data protection legal advice on the Group's AI initiatives, including generative AI tools, machine learning models and automated decision-making systems.\nAdvise on the lawfulness of AI-driven processing.\nSupport the development of internal AI governance frameworks and policies, ensuring privacy-by-design principles are embedded from the outset.\nMonitor developments in AI regulation and advise on their implications for the Group's activities.\nLead the legal response to personal data incidents and breaches, including severity assessment and advising on regulatory notification obligations.\nManage notifications to the ICO within statutory timeframes and coordinate any required communications to affected data subjects.\nCoordinate breach response with Information Security, Compliance and Communications teams to ensure a timely and legally robust response.\nManage proactive and reactive engagement with the ICO, including regulatory investigations and formal inquiries.\nDesign and deliver privacy training and awareness programmes tailored to business stakeholders across the Group.\nSupport embedding a culture of data protection across the organisation through accessible, practical guidance and communications.\nKnowledge, Skills and Behaviours\nEssential\nExtensive knowledge of UK GDPR and the Data Protection Act 2018.\nExtensive knowledge of the Data (Use and Access) Act 2025 and its implications for data sharing, smart data schemes and research exemptions.\nExtensive knowledge of the Privacy and Electronic Communications Regulations (PECR).\nExtensive knowledge of UK Information Commissioner's Office (ICO) guidance and regulatory expectations.\nExtensive knowledge of EU GDPR and international privacy frameworks where applicable.\nExtensive knowledge of Data Processing Agreements, International Data Transfer Agreements (IDTAs) and Standard Contractual Clauses (SCCs).\nExtensive knowledge of Records of Processing Activities (ROPAs), Data Protection Impact Assessments (DPIAs) and Legitimate Interest Assessments (LIAs).\nExtensive knowledge of customer data governance, profiling, marketing permissions and consent management.\nExtensive knowledge of emerging technologies including Artificial Intelligence, automated decision-making and data ethics.\nExtensive knowledge of enterprise data governance frameworks and the interaction between legal, compliance, technology and business functions.\nAbility to provide pragmatic, commercially focused legal advice on complex data protection issues.\nAbility to draft, review and negotiate contracts involving personal data processing and sharing.\nAbility to interpret legislation and regulatory guidance and translate it into practical business solutions.\nAbility to influence senior stakeholders and communicate complex legal concepts in a simple and accessible manner.\nAbility to build collaborative relationships across Legal, Data Protection, Technology, Information Security, Compliance and Commercial teams.\nAbility to analyse complex data processing activities and identify legal and privacy risks.\nAbility to support strategic data governance initiatives and privacy-by-design programmes.\nAbility to manage multiple priorities and provide responsive legal support across a diverse business.\nAbility to exercise sound judgement when advising on new or high-risk data initiatives.\nAbility to demonstrate a solutions-first mindset, identifying compliant pathways to commercial objectives.\nQualified Solicitor (England & Wales) or equivalent legal qualification.\nMinimum 5 years' post-qualification experience advising on UK data protection and privacy law.\nStrong experience leading or supporting enterprise data transformation or digital transformation programmes.\nSignificant experience reviewing and negotiating commercial contracts involving personal data in multiple jurisdictions.\nSignificant experience leading the drafting and negotiation of Data Processing Agreements, Data Sharing Agreements, International Data Transfer Agreements, Standard Contractual Clauses, technology and outsourcing agreements, and Transfer Risk Assessments.\nExperience advising on customer data, marketing, profiling and consent management.\nExperience responding to day-to-day operational privacy queries from business stakeholders.\nDeep experience in providing advice under pressure on breach assessment, notification thresholds, ICO/regulatory reporting, data subject communications, internal investigations, remediation and post-incident governance.\nSubstantial experience gained within an in-house legal function.\nExperience advising on personal data breach response, including regulatory notification obligations to the ICO and management of third-party and data subject notifications.\nDesirable\nConsiderable APAC experience in reviewing and negotiating commercial contracts involving personal data.\nExperience advising on AI governance, machine learning or automated decision-making.\nExperience supporting international organisations and cross-border data transfers.\nExperience implementing or supporting enterprise data governance frameworks.\nExperience working with data cataloguing tools, metadata management or Records of Processing Activities (ROPAs).\nExperience training non-lawyers, influencing stakeholders and embedding privacy controls into business processes.\nExperience engaging with the ICO or other data protection regulators, including managing regulatory investigations or formal inquiries.\nRelevant privacy certification such as CIPP/E (IAPP) or equivalent.\nReward & Benefits: What's in it for me?\nWe want our people to feel recognised, supported and able to thrive both at work and beyond it.\nWe offer a competitive reward package designed to support your financial, physical and mental wellbeing, alongside opportunities to learn, develop and be recognised for the contribution you make. Benefits vary by role and location, and full details will be shared as part of the application process.\nEqual opportunities: Our commitment to inclusion\nCollinson Group is an equal opportunities employer. We welcome applications from people of all backgrounds, identities and experiences, and believe that different perspectives make our business stronger.","description_format":"text","description_chars":9313,"description_truncated":false,"requirements":{"experience_years_min":5,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[]},"benefits":[],"hiring_locations":[{"name":"United Kingdom","iso":"GB","kind":"country"}],"hiring_excludes":[],"relocation_offered":false,"industries":["Loyalty Programs","Property & Casualty Insurance","Business Travel"],"lifecycle":[{"event":"open","at":"2026-10-04T03:06:48Z"}],"visa":[],"liveness":{"score":90,"band":"hot","label":"Hiring now","p_open":1,"p_active":0.903,"p_room":1,"age_days":16,"expected_fill_days":67,"reasons":["conf:36","velocity","win:early","comp:brand"],"computed_at":"2026-10-20T05:45:00Z"},"pay":null,"html_url":"https://alion.io/job/collinson-data-governance-privacy-enablement-counsel","json_url":"https://alion.io/job/collinson-data-governance-privacy-enablement-counsel.json","meta":{"generated_at":"2026-10-21T03:37:09Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":5352,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-22T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":1593},"rest":"https://alion.io/mcp/rest/get_company?id=1593"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fcollinson-data-governance-privacy-enablement-counsel"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fcollinson-data-governance-privacy-enablement-counsel"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fcollinson-data-governance-privacy-enablement-counsel"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/collinson-data-governance-privacy-enablement-counsel\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fcollinson-data-governance-privacy-enablement-counsel"}]}