Contract Junior Attorney GDPR EU

We are seeking a Privacy Compliance Professional (or junior-level contract attorney) to support privacy governance activities, primarily focused on GDPR and UK Data Protection Act compliance. This role supports Legal by drafting, documenting, and coordinating privacy compliance work under established guidance and escalation paths.The role is hands-on and documentation-focused, supporting EMEA privacy operations, cross-border transfers, and assessment activities. Final legal decisions remain with internal Legal leadership.Key ResponsibilitiesSupport privacy governance activities related to GDPR and UK Data Protection Act compliance, particularly for EMEA operationsDraft and refresh privacy notices and disclosures (e.g., CCTV, biometrics, internal notices) using provided guidanceAssist with preparation of training materials, FAQs, and internal guidanceSupport updates to cross-border data transfer documentation, including adequacy assessments and Transfer Impact Assessments (TIAs)Draft and document Data Protection Impact Assessments (DPIAs) in coordination with IT, HR, Operations, and Commercial teamsReview technology agreements to identify privacy and data protection gaps and propose draft updatesSupport vendor privacy assessments, including tracking DPAs, subprocessors, and controller-processor alignmentAssist with regulatory filings, registrations, and supporting documentation as requiredEscalate legal or risk questions to internal Legal leadership as appropriateQualificationsJD, LLB, or equivalent legal qualification OR CIPP/E with 3+ years of hands‑on privacy or data protection experienceStrong drafting, documentation, and analytical skillsAbility to synthesize incomplete or technical input into clear written materialsComfortable working from templates, examples, and defined processesGood judgment regarding when to proceed independently versus escalating issuesExperience working with cross‑functional and international teamsPreferred SkillsCIPP/E or similar privacy certificationPractical knowledge of GDPR, UK Data Protection Act, and cross‑border transfer mechanismsExperience reviewing or drafting privacy and data protection clausesFamiliarity with EMEA regulatory environmentsExposure to AI governance, biometrics, surveillance, or workplace monitoring programsThis role supports privacy compliance execution and documentation. It does not serve as DPO, lead regulatory counsel, or final decision‑maker.#J-18808-Ljbffr